Re: net/can: use-after-free in bcm_rx_thr_flush

2016-11-22 Thread Oliver Hartkopp
On 11/22/2016 06:37 PM, Andrey Konovalov wrote: On Tue, Nov 22, 2016 at 6:29 PM, Oliver Hartkopp wrote: Hi Andrey, thanks for the report. Although I can't see the issue in the code ... Oh, I can see it now m( Will send a patch today. Many thanks, Oliver

Re: net/can: use-after-free in bcm_rx_thr_flush

2016-11-22 Thread Andrey Konovalov
On Tue, Nov 22, 2016 at 6:29 PM, Oliver Hartkopp wrote: > Hi Andrey, > > thanks for the report. > > Although I can't see the issue in the code ... > > On 11/22/2016 10:22 AM, Andrey Konovalov wrote: > >> == >> BUG: KASAN: use-after-fr

Re: net/can: use-after-free in bcm_rx_thr_flush

2016-11-22 Thread Oliver Hartkopp
Hi Andrey, thanks for the report. Although I can't see the issue in the code ... On 11/22/2016 10:22 AM, Andrey Konovalov wrote: == BUG: KASAN: use-after-free in bcm_rx_thr_flush+0x284/0x2b0 Read of size 1 at addr 88006c1faae

net/can: use-after-free in bcm_rx_thr_flush

2016-11-22 Thread Andrey Konovalov
Hi, I've got the following error report while fuzzing the kernel with syzkaller. A reproducer is attached. You may need to run it a few times. On commit 9c763584b7c8911106bb77af7e648bef09af9d80 (4.9-rc6, Nov 20). == BUG: KASAN: use