Re: KASAN: use-after-free Read in br_mdb_ip_get

2019-02-21 Thread Dmitry Vyukov
On Wed, Feb 20, 2019 at 11:23 AM Herbert Xu wrote: > > On Mon, Jan 28, 2019 at 09:28:36AM +0100, Dmitry Vyukov wrote: > > > > > Weird, this is the kfree() on the error path of br_multicast_new_group() > > > when rhashtable_lookup_insert_fast() fails, which means the entry should > > > not be linke

Re: KASAN: use-after-free Read in br_mdb_ip_get

2019-02-20 Thread Herbert Xu
On Mon, Jan 28, 2019 at 09:28:36AM +0100, Dmitry Vyukov wrote: > > > Weird, this is the kfree() on the error path of br_multicast_new_group() > > when rhashtable_lookup_insert_fast() fails, which means the entry should > > not be linked in the rhashtable or the hlist. > > All other frees are via kf

Re: KASAN: use-after-free Read in br_mdb_ip_get

2019-01-28 Thread Dmitry Vyukov
On Sun, Jan 27, 2019 at 10:34 PM Nikolay Aleksandrov wrote: > > On 27/01/2019 22:26, syzbot wrote: > > Hello, > > > > syzbot found the following crash on: > > > > HEAD commit:ba6069759381 Merge tag 'mmc-v5.0-rc2' of git://git.kernel... > > git tree: upstream > > console output: https://s

Re: KASAN: use-after-free Read in br_mdb_ip_get

2019-01-27 Thread Nikolay Aleksandrov
On 27/01/2019 22:26, syzbot wrote: > Hello, > > syzbot found the following crash on: > > HEAD commit:    ba6069759381 Merge tag 'mmc-v5.0-rc2' of git://git.kernel... > git tree:   upstream > console output: https://syzkaller.appspot.com/x/log.txt?x=17b342c4c0 > kernel config:  https://syz

KASAN: use-after-free Read in br_mdb_ip_get

2019-01-27 Thread syzbot
Hello, syzbot found the following crash on: HEAD commit:ba6069759381 Merge tag 'mmc-v5.0-rc2' of git://git.kernel... git tree: upstream console output: https://syzkaller.appspot.com/x/log.txt?x=17b342c4c0 kernel config: https://syzkaller.appspot.com/x/.config?x=505743eba4e4f68 das