[Error after setting -Og] ‘__bad_copy_from’ declared with attribute error: copy source size is too small

2017-11-09 Thread Wei Wei
Hi all, I get a compile time error after setting -Og when compiling for the latest GitHub version. I am using `make defconfig’ to get the default x86_64 config. But previously I did this in v4.4, it's fine. Modification to Makefile: KBUILD_CFLAGS += -O2 $(call cc-disable-warning,maybe-uniniti

Re: [PATCH V2 net] tuntap: properly align skb->head before building skb

2017-10-28 Thread Wei Wei
hitecture. Fix this by aligning >> alloc_frag->offset before the frag refilling. >> >> Fixes: 0bbd7dad34f8 ("tun: make tun_build_skb() thread safe") >> Cc: Eric Dumazet >> Cc: Willem de Bruijn >> Cc: Wei Wei >> Cc: Dmitry Vyukov >> Cc: M

Re: v4.14-rc3/arm64 DABT exception in atomic_inc() / __skb_clone()

2017-10-21 Thread Wei Wei
> wrote: > > On Fri, Oct 20, 2017 at 11:14 AM, Dmitry Vyukov wrote: >> On Fri, Oct 20, 2017 at 4:40 PM, Wei Wei wrote: >>> Sadly, the syzkaller characterized it as a non-reproducible bug and there >>> were empty >>> repro files. But if manually executin

Re: v4.14-rc3/arm64 DABT exception in atomic_inc() / __skb_clone()

2017-10-20 Thread Wei Wei
failed to generate the C reproducer with syz-repro as it said “no target compiler” in the final step. I would appreciate if you could give some hints. Thanks, Wei > On 20 Oct 2017, at 7:14 AM, Mark Rutland wrote: > > On Thu, Oct 19, 2017 at 10:16:08PM -0400, Wei Wei wrote: >>

Re: v4.14-rc3/arm64 DABT exception in atomic_inc() / __skb_clone()

2017-10-19 Thread Wei Wei
00 add%al,(%rax) ... —[ end trace 261e7ac1458ccc0a ]--- Thanks, Wei > On 19 Oct 2017, at 10:53 PM, Eric Dumazet wrote: > > On Thu, Oct 19, 2017 at 7:16 PM, Wei Wei wrote: >> Hi all, >> >> I have fuzzed v4.14-rc3 using syzkaller and found a

v4.14-rc3/arm64 DABT exception in atomic_inc() / __skb_clone()

2017-10-19 Thread Wei Wei
Hi all, I have fuzzed v4.14-rc3 using syzkaller and found a bug similar to that one [1]. But the call trace isn’t the same. The atomic_inc() might handle a corrupted skb_buff. The logs and config have been uploaded to my github repo [2]. [1] https://lkml.org/lkml/2017/10/2/216 [2] https://githu