Re: net/ipv6: use-after-free in ip6_dst_ifdown

2017-06-01 Thread Andrey Konovalov
On Thu, Jun 1, 2017 at 3:17 AM, David Ahern wrote: > On 5/31/17 4:49 PM, Cong Wang wrote: > == > BUG: KASAN: use-after-free in ip6_dst_ifdown+0x3cc/0x400 > net/ipv6/route.c:422 > Read of size 8 at addr 88006afa4ad

Re: net/ipv6: use-after-free in ip6_dst_ifdown

2017-05-31 Thread David Ahern
On 5/31/17 4:49 PM, Cong Wang wrote: == BUG: KASAN: use-after-free in ip6_dst_ifdown+0x3cc/0x400 net/ipv6/route.c:422 Read of size 8 at addr 88006afa4ad8 by task syz-executor6/23554 >>> >>> >>> This one is very

Re: net/ipv6: use-after-free in ip6_dst_ifdown

2017-05-31 Thread Cong Wang
On Wed, May 31, 2017 at 9:55 AM, Eric Dumazet wrote: > On Wed, May 31, 2017 at 9:45 AM, Cong Wang wrote: >> On Wed, May 31, 2017 at 2:42 AM, Andrey Konovalov >> wrote: >>> Hi, >>> >>> I've got the following error report while fuzzing the kernel with syzkaller. >>> >>> On commit 5ed02dbb497422bf

Re: net/ipv6: use-after-free in ip6_dst_ifdown

2017-05-31 Thread Eric Dumazet
On Wed, May 31, 2017 at 9:45 AM, Cong Wang wrote: > On Wed, May 31, 2017 at 2:42 AM, Andrey Konovalov > wrote: >> Hi, >> >> I've got the following error report while fuzzing the kernel with syzkaller. >> >> On commit 5ed02dbb497422bf225783f46e6eadd237d23d6b (4.12-rc3). >> >> Unfortunately it's n

Re: net/ipv6: use-after-free in ip6_dst_ifdown

2017-05-31 Thread Cong Wang
On Wed, May 31, 2017 at 2:42 AM, Andrey Konovalov wrote: > Hi, > > I've got the following error report while fuzzing the kernel with syzkaller. > > On commit 5ed02dbb497422bf225783f46e6eadd237d23d6b (4.12-rc3). > > Unfortunately it's not reproducible. > > ==

net/ipv6: use-after-free in ip6_dst_ifdown

2017-05-31 Thread Andrey Konovalov
Hi, I've got the following error report while fuzzing the kernel with syzkaller. On commit 5ed02dbb497422bf225783f46e6eadd237d23d6b (4.12-rc3). Unfortunately it's not reproducible. == BUG: KASAN: use-after-free in ip6_dst_ifdown+0x