Re: NULL-ptr deref in kvm_arch_vcpu_ioctl under AMD CPUs

2016-09-09 Thread Paolo Bonzini
> > Hi Paolo, > > I've noticed that KVM is not actually enabled on my machines. /dev/kvm > is missing. If I mknod it manually, opens return ENODEV. > After several hours of debugging I figured that it seems to be caused by: > > commit 91fa0f8e9e2937fd9360f326ad60d51908347afd > Author: Paolo Bon

Re: NULL-ptr deref in kvm_arch_vcpu_ioctl under AMD CPUs

2016-09-09 Thread Dmitry Vyukov
On Tue, Aug 30, 2016 at 5:03 PM, Paolo Bonzini wrote: > > > On 30/08/2016 15:08, Dmitry Vyukov wrote: >>> > b21629da120 kvm: x86: avoid warning on repeated KVM_SET_TSS_ADDR >>> > 83676e92389 KVM: x86: avoid vmalloc(0) in the KVM_SET_CPUID >>> > 78e546c824f KVM: fail KVM_SET_VCPU_EVENTS with

Re: NULL-ptr deref in kvm_arch_vcpu_ioctl under AMD CPUs

2016-08-30 Thread Paolo Bonzini
On 30/08/2016 15:08, Dmitry Vyukov wrote: >> > b21629da120 kvm: x86: avoid warning on repeated KVM_SET_TSS_ADDR >> > 83676e92389 KVM: x86: avoid vmalloc(0) in the KVM_SET_CPUID >> > 78e546c824f KVM: fail KVM_SET_VCPU_EVENTS with invalid exception number >> > c622a3c21ed KVM: irqfd: fix NU

Re: NULL-ptr deref in kvm_arch_vcpu_ioctl under AMD CPUs

2016-08-30 Thread Dmitry Vyukov
On Mon, Aug 29, 2016 at 2:02 PM, Paolo Bonzini wrote: > > On 19/08/2016 02:16, Dmitry Vyukov wrote: >> > > This seems non-exploitable due to mmap_min_addr, so I guess it should >> > > be treated just as a regular bug >> > >> > Probably fixed by commit 4c5ea0a9cd02 ("locking/static_key: Fix >> > co

Re: NULL-ptr deref in kvm_arch_vcpu_ioctl under AMD CPUs

2016-08-29 Thread Paolo Bonzini
On 19/08/2016 02:16, Dmitry Vyukov wrote: > > > This seems non-exploitable due to mmap_min_addr, so I guess it should > > > be treated just as a regular bug > > > > Probably fixed by commit 4c5ea0a9cd02 ("locking/static_key: Fix > > concurrent static_key_slow_inc()", 2016-06-21). There should be

Re: NULL-ptr deref in kvm_arch_vcpu_ioctl under AMD CPUs

2016-08-18 Thread Dmitry Vyukov
On Thu, Aug 18, 2016 at 4:58 AM, Paolo Bonzini wrote: > > > On 19/02/2016 15:06, Robert Święcki wrote: >> Hi, >> >> This seems non-exploitable due to mmap_min_addr, so I guess it should >> be treated just as a regular bug > > Probably fixed by commit 4c5ea0a9cd02 ("locking/static_key: Fix > concur

Re: NULL-ptr deref in kvm_arch_vcpu_ioctl under AMD CPUs

2016-08-18 Thread Paolo Bonzini
On 19/02/2016 15:06, Robert Święcki wrote: > Hi, > > This seems non-exploitable due to mmap_min_addr, so I guess it should > be treated just as a regular bug Probably fixed by commit 4c5ea0a9cd02 ("locking/static_key: Fix concurrent static_key_slow_inc()", 2016-06-21). There should be no outst

Re: NULL-ptr deref in kvm_arch_vcpu_ioctl under AMD CPUs

2016-02-19 Thread Robert Święcki
> > // autogenerated by syzkaller (http://github.com/google/syzkaller) > #include > #include > #include > #include > #include > > long r[6]; > > int main() > { > memset(r, -1, sizeof(r)); > r[0] = syscall(SYS_mmap, 0x2000ul, 0x13000ul, 0x3ul, 0x32ul, > 0xul, 0x0ul); >