Re: KASAN: use-after-free Write in tls_push_record (2)

On Thu, Jul 12, 2018 at 06:44:55AM -0400, Boris Pismenny wrote: > It seems to me that the crash here is due to write_space being called after > the close system call. Maybe the correct solution is to move the TX software > state to be released in sk_destruct. As we already do for the device state >

KASAN: use-after-free Write in tls_push_record

Hello, syzbot found the following crash on: HEAD commit:13405468f49d bpfilter: don't pass O_CREAT when opening con.. git tree: net-next console output: https://syzkaller.appspot.com/x/log.txt?x=109ad82f80 kernel config: https://syzkaller.appspot.com/x/.config?x=8be0182d69f8d422 da