Re: KASAN: use-after-free Read in usblp_bulk_read

2020-05-06 Thread Alan Stern
On Wed, 6 May 2020, Pete Zaitcev wrote: > On Wed, 06 May 2020 11:14:42 +0200 > Oliver Neukum wrote: > > > Very well. We are not going to find it without exceptional luck. Yet > > there may be a real issue, too. We simply do not know. How about the > > attached patch? > > >

Re: KASAN: use-after-free Read in usblp_bulk_read

2020-05-06 Thread Pete Zaitcev
On Wed, 06 May 2020 11:14:42 +0200 Oliver Neukum wrote: > Very well. We are not going to find it without exceptional luck. Yet > there may be a real issue, too. We simply do not know. How about the > attached patch? > usblp_unlink_urbs(usblp); > mutex_unlock(>mut); > +

Re: KASAN: use-after-free Read in usblp_bulk_read

2020-05-06 Thread Alan Stern
On Wed, 6 May 2020, Oliver Neukum wrote: > Am Donnerstag, den 30.04.2020, 11:11 -0400 schrieb Alan Stern: > > > KASAN is documented. The difficulty is that this race is obviously > > hard to trigger, and without the ability to reproduce it we can't run > > diagnostics to find the underlying

Re: KASAN: use-after-free Read in usblp_bulk_read

2020-05-06 Thread Oliver Neukum
Am Donnerstag, den 30.04.2020, 11:11 -0400 schrieb Alan Stern: > KASAN is documented. The difficulty is that this race is obviously > hard to trigger, and without the ability to reproduce it we can't run > diagnostics to find the underlying cause. > > We can't even ask syzbot to try running

Re: KASAN: use-after-free Read in usblp_bulk_read

2020-04-30 Thread Alan Stern
On Thu, 30 Apr 2020, Oliver Neukum wrote: > Am Dienstag, den 21.04.2020, 08:35 -0700 schrieb syzbot: > > Hello, > > > > syzbot found the following crash on: > > > > HEAD commit:0fa84af8 Merge tag 'usb-serial-5.7-rc1' of https://git.ker.. > > git tree:

Re: KASAN: use-after-free Read in usblp_bulk_read

2020-04-30 Thread Oliver Neukum
Am Dienstag, den 21.04.2020, 08:35 -0700 schrieb syzbot: > Hello, > > syzbot found the following crash on: > > HEAD commit:0fa84af8 Merge tag 'usb-serial-5.7-rc1' of https://git.ker.. > git tree: https://github.com/google/kasan.git usb-fuzzer > console output: