Re: Slab out of bounds in setxattr
shankarapailoor <[email protected]> Fri, 1 Jun 2018 14:00:09 -0700
| Newsgroups | gmane.comp.file-systems.jfs.general |
|---|---|
| Message-ID | <CAB+yDaZWWCCW0t1KO3JBzF=6P+MyjPD8ppsD00jB6_o30cL3jw@mail.gmail.com> |
Sorry I was fuzzing 4.17-rc7 On Fri, Jun 1, 2018 at 1:52 PM, shankarapailoor <[email protected]> wrote: > Hi Dave et al, > > I have been fuzzing linux 4.17-rc4 with JFS using Syzkaller KASAN: > slab-out-of-bounds in jfs_xattr. > > Attached are my kernel configs and a C reproducer. In the first > setxattr call it appears that length is much larger than the name. In > __jfs_setxattr, I don't see where the length is checked against the > actual value length. > > Regards, > Shankara Pailoor -- Regards, Shankara Pailoor ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot