Re: net/kcm: use-after-free in kcm_wq

2017-03-23 Thread Dmitry Vyukov
On Fri, Mar 3, 2017 at 9:03 PM, Cong Wang wrote: > On Fri, Mar 3, 2017 at 2:11 AM, Dmitry Vyukov wrote: >> Also like this one: >> >> == >> BUG: KASAN: use-after-free in atomic_long_read >> include/linux/compiler.h:254 [inline] at add

Re: net/kcm: use-after-free in kcm_wq

2017-03-03 Thread Cong Wang
On Fri, Mar 3, 2017 at 2:11 AM, Dmitry Vyukov wrote: > Also like this one: > > == > BUG: KASAN: use-after-free in atomic_long_read > include/linux/compiler.h:254 [inline] at addr 8800538aba60 > BUG: KASAN: use-after-free in get_wo

Re: net/kcm: use-after-free in kcm_wq

2017-03-03 Thread Dmitry Vyukov
On Fri, Mar 3, 2017 at 11:09 AM, Dmitry Vyukov wrote: > Hello, > > I am getting the following use-after-free reports while running > syzkaller fuzzer on 86292b33d4b79ee03e2f43ea0381ef85f077c760. Seems > that work items are not properly cancelled. > > ===

Re: net/kcm: use-after-free in kcm_wq

2017-03-03 Thread Dmitry Vyukov
On Fri, Mar 3, 2017 at 11:11 AM, Dmitry Vyukov wrote: > On Fri, Mar 3, 2017 at 11:09 AM, Dmitry Vyukov wrote: >> Hello, >> >> I am getting the following use-after-free reports while running >> syzkaller fuzzer on 86292b33d4b79ee03e2f43ea0381ef85f077c760. Seems >> that work items are not properly

net/kcm: use-after-free in kcm_wq

2017-03-03 Thread Dmitry Vyukov
Hello, I am getting the following use-after-free reports while running syzkaller fuzzer on 86292b33d4b79ee03e2f43ea0381ef85f077c760. Seems that work items are not properly cancelled. == BUG: KASAN: use-after-free in worker_thread+0x1