Re: [PATCH] HID: hidraw: Fix invalid read in hidraw_ioctl

2019-08-22 Thread Jiri Kosina
On Wed, 21 Aug 2019, Alan Stern wrote: > The syzbot fuzzer has reported a pair of problems in the > hidraw_ioctl() function: slab-out-of-bounds read and use-after-free > read. An example of the first: > > BUG: KASAN: slab-out-of-bounds in strlen+0x79/0x90 lib/string.c:525 > Read of size 1 at add

[PATCH] HID: hidraw: Fix invalid read in hidraw_ioctl

2019-08-21 Thread Alan Stern
The syzbot fuzzer has reported a pair of problems in the hidraw_ioctl() function: slab-out-of-bounds read and use-after-free read. An example of the first: BUG: KASAN: slab-out-of-bounds in strlen+0x79/0x90 lib/string.c:525 Read of size 1 at addr 8881c8035f38 by task syz-executor.4/2833 CPU: