Re: futex: use-after-free in futex_wait_requeue_pi

2017-03-13 Thread Dmitry Vyukov
On Mon, Mar 13, 2017 at 11:02 AM, Sebastian Andrzej Siewior wrote: > On 2017-03-13 09:06:20 [+0100], Peter Zijlstra wrote: >> On Fri, Mar 10, 2017 at 07:10:30PM +0100, Dmitry Vyukov wrote: >> > The following program triggers use-after-free in futex_wait_requeue_pi: >> > https://gist.githubusercont

Re: futex: use-after-free in futex_wait_requeue_pi

2017-03-13 Thread Sebastian Andrzej Siewior
On 2017-03-13 09:06:20 [+0100], Peter Zijlstra wrote: > On Fri, Mar 10, 2017 at 07:10:30PM +0100, Dmitry Vyukov wrote: > > The following program triggers use-after-free in futex_wait_requeue_pi: > > https://gist.githubusercontent.com/dvyukov/42e596153263793b75ad587c8d0626b0/raw/35461a6c1b0a4163a671

Re: futex: use-after-free in futex_wait_requeue_pi

2017-03-13 Thread Peter Zijlstra
On Fri, Mar 10, 2017 at 07:10:30PM +0100, Dmitry Vyukov wrote: > Hello, > > The following program triggers use-after-free in futex_wait_requeue_pi: > https://gist.githubusercontent.com/dvyukov/42e596153263793b75ad587c8d0626b0/raw/35461a6c1b0a4163a67191ff5d35202f35ecbf44/gistfile1.txt There's a kn

Re: futex: use-after-free in futex_wait_requeue_pi

2017-03-10 Thread Dmitry Vyukov
On Fri, Mar 10, 2017 at 7:30 PM, Sebastian Andrzej Siewior wrote: > On 2017-03-10 19:10:30 [+0100], Dmitry Vyukov wrote: >> BUG: KASAN: use-after-free in futex_wait_requeue_pi+0xf5d/0x1160 > … >> On commit c1aa905a304e4b5e6a3fe112ec62d9c1c7b0c155. > That is "Merge tag 'pm-4.11-rc2' of > git://git

Re: futex: use-after-free in futex_wait_requeue_pi

2017-03-10 Thread Sebastian Andrzej Siewior
On 2017-03-10 19:10:30 [+0100], Dmitry Vyukov wrote: > BUG: KASAN: use-after-free in futex_wait_requeue_pi+0xf5d/0x1160 … > On commit c1aa905a304e4b5e6a3fe112ec62d9c1c7b0c155. That is "Merge tag 'pm-4.11-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm". Are sure about that co

futex: use-after-free in futex_wait_requeue_pi

2017-03-10 Thread Dmitry Vyukov
Hello, The following program triggers use-after-free in futex_wait_requeue_pi: https://gist.githubusercontent.com/dvyukov/42e596153263793b75ad587c8d0626b0/raw/35461a6c1b0a4163a67191ff5d35202f35ecbf44/gistfile1.txt == BUG: KASAN: use-