Re: BUG: KASAN: global-out-of-bounds in strscpy+0x807/0x970

2017-10-11 Thread Kees Cook
On Tue, Oct 10, 2017 at 9:37 PM, Tyler Hicks wrote: > On 10/10/2017 10:32 PM, Simon Brewer wrote: >> Hint start looking at this thread. https://lkml.org/lkml/2017/7/18/874 >> >> Summary: strscpy and KASAN are currently incompatible. strscpy does a >> 64 bit speculative fetch on a char pointer (fo

Re: BUG: KASAN: global-out-of-bounds in strscpy+0x807/0x970

2017-10-10 Thread Tyler Hicks
On 10/10/2017 10:32 PM, Simon Brewer wrote: > Hint start looking at this thread. https://lkml.org/lkml/2017/7/18/874 > > Summary: strscpy and KASAN are currently incompatible. strscpy does a > 64 bit speculative fetch on a char pointer (for efficiency reasons). > KASAN spots this and flags an er

Re: BUG: KASAN: global-out-of-bounds in strscpy+0x807/0x970

2017-10-10 Thread Simon Brewer
On 11 October 2017 at 12:46, Jakub Kicinski wrote: > On Tue, 10 Oct 2017 21:44:01 -0400, Tyler Hicks wrote: >> On 10/10/2017 09:28 PM, Jakub Kicinski wrote: >> > I'm hitting this on sysctl -a with net-next (4.14-rc4). >> >> Hey Jakub - thanks for the bug report! >> >> > >> > I saw that seccomp_act

Re: BUG: KASAN: global-out-of-bounds in strscpy+0x807/0x970

2017-10-10 Thread Jakub Kicinski
On Tue, 10 Oct 2017 21:44:01 -0400, Tyler Hicks wrote: > On 10/10/2017 09:28 PM, Jakub Kicinski wrote: > > I'm hitting this on sysctl -a with net-next (4.14-rc4). > > Hey Jakub - thanks for the bug report! > > > > > I saw that seccomp_actions_logged_handler was introduced > > not-so-long-ago b

Re: BUG: KASAN: global-out-of-bounds in strscpy+0x807/0x970

2017-10-10 Thread Tyler Hicks
rst I've heard of it. I'll have a look. Tyler > > [ 753.503760] BUG: KASAN: global-out-of-bounds in strscpy+0x807/0x970 > [ 753.510892] Read of size 8 at addr a96b97c8 by task sysctl/1787 > [ 753.518416] > [ 753.520198] CPU: 1 PID: 1787 Comm: sysctl Not taint

BUG: KASAN: global-out-of-bounds in strscpy+0x807/0x970

2017-10-10 Thread Jakub Kicinski
I'm hitting this on sysctl -a with net-next (4.14-rc4). I saw that seccomp_actions_logged_handler was introduced not-so-long-ago by Tyler, is there a fix for this? [ 753.503760] BUG: KASAN: global-out-of-bounds in strscpy+0x807/0x970 [ 753.510892] Read of size 8 at addr a96b97