Re: UBSAN: array-index-out-of-bounds in dbAdjTree

2021-01-20 Thread butt3rflyh4ck
This was assigned CVE-2020-27815 via redhat. Regards. butt3rflyh4ck. On Fri, Nov 20, 2020 at 11:01 PM Dave Kleikamp wrote: > > On 11/20/20 3:52 AM, butt3rflyh4ck wrote: > > You are welcome and have you submitted the patch to linux upstream ? > > If you have no time do

UBSAN: array-index-out-of-bounds in dbAdjTree

2020-10-08 Thread butt3rflyh4ck
76cf20 R13: R14: 0076cf20 R15: 7ffc7d66ec90 Regard, butt3rflyh4ck.

Re: UBSAN: array-index-out-of-bounds in dbAdjTree

2020-11-20 Thread butt3rflyh4ck
You are welcome and have you submitted the patch to linux upstream ? If you have no time do that and I can do it. On Sun, Nov 15, 2020 at 12:17 AM Dave Kleikamp wrote: > > Thanks for reporting and testing this! > > Shaggy > > On 11/14/20 7:55 AM, butt3rflyh4ck wrote: >

Re: UBSAN: array-index-out-of-bounds in dbAdjTree

2020-11-20 Thread butt3rflyh4ck
You are welcome and have you submitted the patch to linux upstream ? If you have no time do that and I can do it. Regard, butt3rflyh4ck. On Sun, Nov 15, 2020 at 12:17 AM Dave Kleikamp wrote: > > Thanks for reporting and testing this! > > Shaggy > > On 11/14/20 7:55 AM, b

Re: UBSAN: array-index-out-of-bounds in dbAdjTree

2020-11-14 Thread butt3rflyh4ck
Yes, I have tested the patch, it seem to fix the problem. Regard, butt3rflyh4ck. On Sat, Nov 14, 2020 at 5:16 AM Dave Kleikamp wrote: > > On 10/8/20 12:00 PM, butt3rflyh4ck wrote: > > I report a array-index-out-of-bounds bug (in linux-5.9.0-rc6) found by > > kernel fuzz. >

null-ptr-deref in exfat_cache_inval_inode

2020-09-29 Thread butt3rflyh4ck
370ef0 DR0: DR1: DR2: DR3: 886c DR6: 0ff0 DR7: 0400 Regard, butt3rflyh4ck

null-ptr-deref in exfat_cache_inval_inode

2020-09-29 Thread butt3rflyh4ck
370ef0 DR0: DR1: DR2: DR3: 886c DR6: 0ff0 DR7: 0400 Regard, butt3rflyh4ck

memory leak in exfat_parse_param

2020-06-01 Thread butt3rflyh4ck
I report a bug (in linux-5.7.0-rc7) found by syzkaller. kernel config: https://github.com/butterflyhack/syzkaller-fuzz/blob/master/config-v5.7.0-rc7 and can reproduce. A param->string held by exfat_mount_options. BUG: memory leak unreferenced object 0x88801972e090 (size 8): comm

KASAN: use-after-free Write in snd_rawmidi_kernel_write1

2020-05-07 Thread butt3rflyh4ck
fb fb fb == Regards, butt3rflyh4ck

Re: KASAN: use-after-free Write in snd_rawmidi_kernel_write1

2020-05-07 Thread butt3rflyh4ck
No, it's not. Regards, butt3rflyh4ck. On Thu, May 7, 2020 at 5:50 PM Takashi Iwai wrote: > > On Thu, 07 May 2020 09:54:34 +0200, > butt3rflyh4ck wrote: > > > > I report a bug (in linux-5.7-rc1) found by syzkaller. > > > > kernel config: > > https://

Re: [PATCH] f2fs: fix to avoid out-of-bounds memory access

2021-03-23 Thread butt3rflyh4ck
Hi, I have tested the patch on 5.12.0-rc4+, it seems to fix the problem. Regards, butt3rflyh4ck. On Mon, Mar 22, 2021 at 7:47 PM Chao Yu wrote: > > butt3rflyh4ck reported a bug found by > syzkaller fuzzer with custom modifications in 5.12.0-rc3+ [1]: > > dump_stack

KASAN: use-after-free in nilfs_mdt_destroy

2021-03-22 Thread butt3rflyh4ck
fb fb fb ^ 8880478f0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 8880478f0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb == the attachment is reproduce. Regards, butt3rflyh4ck. repro.cprog Description: Binary data

KASAN: use-after-free Read in f2fs_flush_nat_entries

2021-03-22 Thread butt3rflyh4ck
fb fb fb ^ 88804a180e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 88804a180f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb == The attachment is a reproduce. Regards, butt3rflyh4ck. // autogenerated by syzkaller (https://g

Re: [f2fs-dev] [PATCH] f2fs: fix to avoid out-of-bounds memory access

2021-04-20 Thread butt3rflyh4ck
Cool, thanks! Regards, butt3rflyh4ck. On Wed, Apr 21, 2021 at 2:27 AM Jaegeuk Kim wrote: > > Hi, > > On 04/20, Salvatore Bonaccorso wrote: > > Hi, > > > > On Tue, Mar 23, 2021 at 02:43:29PM +0800, Chao Yu wrote: > > > Hi butt3rflyh4ck, > > &g