Re: [PATCH] vgacon: Fix an out-of-bounds in vgacon_scrollback_update()

2020-07-30 Thread Jiri Slaby
Hi, On 31. 07. 20, 5:23, Yang Yingliang wrote: > void execute_one(void) > { > intptr_t res = 0; > res = syz_open_dev(0xc, 4, 1); open(/dev/tty1) > if (res != -1) > r[0] = res; > *(uint16_t*)0x2000 = 0xc; > *(uint16_t*)0x2002 = 0x373; > *(uint16_t*)

Re: [PATCH] vgacon: Fix an out-of-bounds in vgacon_scrollback_update()

2020-07-30 Thread Jiri Slaby
On 30. 07. 20, 15:24, Yang Yingliang wrote: > > On 2020/7/30 19:04, Jiri Slaby wrote: >> On 13. 07. 20, 12:57, Yang Yingliang wrote: >>> I got a slab-out-of-bounds report when I doing fuzz test. >>> >>> [  334.989515] >>> == >>> [  33

Re: [PATCH] vgacon: Fix an out-of-bounds in vgacon_scrollback_update()

2020-07-30 Thread Yang Yingliang
On 2020/7/30 19:04, Jiri Slaby wrote: On 13. 07. 20, 12:57, Yang Yingliang wrote: I got a slab-out-of-bounds report when I doing fuzz test. [ 334.989515] == [ 334.989577] BUG: KASAN: slab-out-of-bounds in vgacon_scroll+0x57a/0

Re: [PATCH] vgacon: Fix an out-of-bounds in vgacon_scrollback_update()

2020-07-30 Thread Jiri Slaby
On 13. 07. 20, 12:57, Yang Yingliang wrote: > I got a slab-out-of-bounds report when I doing fuzz test. > > [ 334.989515] > == > [ 334.989577] BUG: KASAN: slab-out-of-bounds in vgacon_scroll+0x57a/0x8ed > [ 334.989588] Write of si

[PATCH] vgacon: Fix an out-of-bounds in vgacon_scrollback_update()

2020-07-12 Thread Yang Yingliang
I got a slab-out-of-bounds report when I doing fuzz test. [ 334.989515] == [ 334.989577] BUG: KASAN: slab-out-of-bounds in vgacon_scroll+0x57a/0x8ed [ 334.989588] Write of size 1766 at addr 8883de69ff3e by task test/2658 [ 33