Re: [PATCH net] ipv4: route: fix inet_rtm_getroute induced crash

2017-08-14 Thread David Miller
From: Florian Westphal Date: Mon, 14 Aug 2017 00:52:58 +0200 > "ip route get $daddr iif eth0 from $saddr" causes: > BUG: KASAN: use-after-free in ip_route_input_rcu+0x1535/0x1b50 > Call Trace: > ip_route_input_rcu+0x1535/0x1b50 > ip_route_input_noref+0xf9/0x190 > tcp_v4_early_demux+0x1a4/

Re: [PATCH net] ipv4: route: fix inet_rtm_getroute induced crash

2017-08-14 Thread Eric Dumazet
On Mon, 2017-08-14 at 00:52 +0200, Florian Westphal wrote: > "ip route get $daddr iif eth0 from $saddr" causes: > BUG: KASAN: use-after-free in ip_route_input_rcu+0x1535/0x1b50 > Call Trace: > ip_route_input_rcu+0x1535/0x1b50 > ip_route_input_noref+0xf9/0x190 > tcp_v4_early_demux+0x1a4/0x2b

Re: [PATCH net] ipv4: route: fix inet_rtm_getroute induced crash

2017-08-13 Thread Florian Westphal
David Ahern wrote: > On 8/13/17 4:52 PM, Florian Westphal wrote: > > "ip route get $daddr iif eth0 from $saddr" causes: > > BUG: KASAN: use-after-free in ip_route_input_rcu+0x1535/0x1b50 > > Call Trace: > > ip_route_input_rcu+0x1535/0x1b50 > > ip_route_input_noref+0xf9/0x190 > > tcp_v4_ear

Re: [PATCH net] ipv4: route: fix inet_rtm_getroute induced crash

2017-08-13 Thread David Ahern
On 8/13/17 4:52 PM, Florian Westphal wrote: > "ip route get $daddr iif eth0 from $saddr" causes: > BUG: KASAN: use-after-free in ip_route_input_rcu+0x1535/0x1b50 > Call Trace: > ip_route_input_rcu+0x1535/0x1b50 > ip_route_input_noref+0xf9/0x190 > tcp_v4_early_demux+0x1a4/0x2b0 > ip_rcv+0x

[PATCH net] ipv4: route: fix inet_rtm_getroute induced crash

2017-08-13 Thread Florian Westphal
"ip route get $daddr iif eth0 from $saddr" causes: BUG: KASAN: use-after-free in ip_route_input_rcu+0x1535/0x1b50 Call Trace: ip_route_input_rcu+0x1535/0x1b50 ip_route_input_noref+0xf9/0x190 tcp_v4_early_demux+0x1a4/0x2b0 ip_rcv+0xbcb/0xc05 __netif_receive_skb+0x9c/0xd0 netif_receive_