subject:"usb\/sound\: use\-after\-free in __uac_clock_find_source"

Re: [alsa-devel] usb/sound: use-after-free in __uac_clock_find_source

2017-11-21 Thread Takashi Iwai

On Tue, 21 Nov 2017 14:52:00 +0100, Andrey Konovalov wrote: > > Hi! > > I've got the following report while fuzzing the kernel with syzkaller. > > On commit e1d1ea549b57790a3d8cf6300e6ef86118d692a3 (4.15-rc1). > > This actually looks more like an out-of-bounds with large offset than > a use-aft

usb/sound: use-after-free in __uac_clock_find_source

2017-11-21 Thread Andrey Konovalov

Hi! I've got the following report while fuzzing the kernel with syzkaller. On commit e1d1ea549b57790a3d8cf6300e6ef86118d692a3 (4.15-rc1). This actually looks more like an out-of-bounds with large offset than a use-after-free due to unrelated alloc and free stack traces.