Re: KASAN: use-after-free Read in cma_cancel_operation, rdma_listen

2021-04-13 Thread Hao Sun
Jason Gunthorpe 于2021年4月13日周二 下午9:45写道: > > On Tue, Apr 13, 2021 at 09:42:43PM +0800, Hao Sun wrote: > > Jason Gunthorpe 于2021年4月13日周二 下午9:34写道: > > > > > > On Tue, Apr 13, 2021 at 11:36:41AM +0800, Hao Sun wrote: > > > > Hi > > > > > &

Re: KASAN: use-after-free Read in cma_cancel_operation, rdma_listen

2021-04-13 Thread Hao Sun
Jason Gunthorpe 于2021年4月13日周二 下午9:34写道: > > On Tue, Apr 13, 2021 at 11:36:41AM +0800, Hao Sun wrote: > > Hi > > > > When using Healer(https://github.com/SunHao-0/healer/tree/dev) to fuzz > > the Linux kernel, I found two use-after-free bugs which have been > >

Re: More KCSAN data-race Reports

2021-04-12 Thread Hao Sun
Jan Kara 于2021年4月12日周一 下午5:02写道: > > Hello, > > On Sun 11-04-21 11:42:05, Hao Sun wrote: > > Since the last KCSAN report[1], I found two more KCSAN reports that > > Syzbot had not reported. > > Not sure if they are valid bugs, I hope the stack information in &

Re: BUG: unable to handle kernel paging request in bpf_check

2021-04-12 Thread Hao Sun
Besides, another similar bug occurred while fault injection was enabled. BUG: unable to handle kernel paging request in bpf_prog_alloc_no_stats RAX: ffda RBX: 0059c080 RCX: 0047338d RDX: 0078 RSI:

Re: BUG: unable to handle kernel NULL pointer dereference in io_uring_cancel_task_requests

2021-04-11 Thread Hao Sun
Pavel Begunkov 于2021年4月11日周日 下午4:14写道: > > On 11/04/2021 04:08, Hao Sun wrote: > > Hi > > > > When using Healer(https://github.com/SunHao-0/healer/tree/dev) to fuzz > > the Linux kernel, I found a null-ptr-deref bug in > > io_uring_cancel_task_requests unde

BUG: unable to handle kernel NULL pointer dereference in io_uring_cancel_task_requests

2021-04-10 Thread Hao Sun
Hi When using Healer(https://github.com/SunHao-0/healer/tree/dev) to fuzz the Linux kernel, I found a null-ptr-deref bug in io_uring_cancel_task_requests under fault injection condition, but I'm not sure about this. Sorry, I do not have a reproducing program for this bug. I hope that the stack

BUG: unable to handle kernel NULL pointer dereference in do_epoll_wait

2021-04-10 Thread Hao Sun
Hi When using Healer(https://github.com/SunHao-0/healer/tree/dev) to fuzz the Linux kernel, I found a null-ptr-deref bug in do_epoll_wait, but I'm not sure about this. Sorry, I do not have a reproducing program for this bug. I hope that the stack trace information in the crash log can help you

Re: [PATCH] tty: n_gsm: check error while registering tty devices

2021-04-08 Thread Hao Sun
> Can you share the info you know about the syzbot report? Sorry for the late reply, I don't know the REPORT information of syzbot because I haven't deployed it. The attached reproduction program was generated by syz-repro. As you can see from the repro.cprog, the bug occurred in the case of

Re: KCSAN: data-race in __jbd2_journal_file_buffer / jbd2_journal_dirty_metadata

2021-04-06 Thread Hao Sun
rrency Sanitizer on: CPU: 0 PID: 1955 Comm: kworker/u5:2 Not tainted 5.11.0+ #5 Sorry, I couldn't symbolize it because the original Linux binary was lost. Do you think this is an actual bug? Hao Jan Kara 于2021年4月6日周二 下午8:32写道: > > Hello! > > On Sun 04-04-21 17:40:44, Hao Sun wrote: >

Re: KASAN: use-after-free Read in cdev_del

2021-04-06 Thread Hao Sun
> >On Sun, Apr 04, 2021 at 08:39:34PM +0800, Hillf Danton wrote: > >> On Sun, 4 Apr 2021 17:05:17 Hao Sun wrote: > >> > Besides, the 'refcount bug in cdev_del' bug still exists too. > >> > >> Thanks for your report, Hao. > &g

[PATCH v2] drm/loongson: Add DDC support for loongson display controller

2021-03-12 Thread Hao Sun
Add GPIO and I2C driver to detect connector and fetch EDID via DDC. Signed-off-by: Hao Sun --- drivers/gpu/drm/loongson/Makefile | 3 +- drivers/gpu/drm/loongson/loongson_connector.c | 120 +++- drivers/gpu/drm/loongson/loongson_drv.c | 16 +- drivers/gpu/drm/loongson

TCP vegas implementation

2001-03-06 Thread Hao Sun
> From Neal Cardwell ([EMAIL PROTECTED]) > Tue, 20 Jul 1999 03:08:21 -0700 (PDT) > > Hi all, > > A new TCP Vegas patch for 2.2.10/2.3.10 is available at: > http://www.cs.washington.edu/homes/cardwell/linux-vegas/ Does anyone know where to get the above TCP vegas implementation code or a more

TCP vegas implementation

2001-03-06 Thread Hao Sun
From Neal Cardwell ([EMAIL PROTECTED]) Tue, 20 Jul 1999 03:08:21 -0700 (PDT) Hi all, A new TCP Vegas patch for 2.2.10/2.3.10 is available at: http://www.cs.washington.edu/homes/cardwell/linux-vegas/ Does anyone know where to get the above TCP vegas implementation code or a more recent