Re: Slab out of bounds in setxattr

shankarapailoor <[email protected]> Fri, 1 Jun 2018 14:02:58 -0700
Newsgroups gmane.comp.file-systems.jfs.general
Message-ID <CAB+yDaYZ1hz567_xmR4gs=hCMFbD+LYmHMU0pnQeZi1FR=TUXA@mail.gmail.com>
Sorry for the spam but I forgot to attach the stack trace. Here it is:
https://pastebin.com/mNQgfc9t


On Fri, Jun 1, 2018 at 2:00 PM, shankarapailoor
<[email protected]> wrote:
> Sorry I was fuzzing 4.17-rc7
>
> On Fri, Jun 1, 2018 at 1:52 PM, shankarapailoor
> <[email protected]> wrote:
>> Hi Dave et al,
>>
>> I have been fuzzing linux 4.17-rc4 with JFS using Syzkaller  KASAN:
>> slab-out-of-bounds in jfs_xattr.
>>
>> Attached are my kernel configs and a C reproducer. In the first
>> setxattr call it appears that length is much larger than the name. In
>> __jfs_setxattr, I don't see where the length is checked against the
>> actual value length.
>>
>> Regards,
>> Shankara Pailoor
>
>
>
> --
> Regards,
> Shankara Pailoor



-- 
Regards,
Shankara Pailoor

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot