Re: mm: use-after-free in zap_page_range

2017-03-08 Thread Dmitry Vyukov
On Fri, Mar 3, 2017 at 5:23 PM, Andrea Arcangeli wrote: > Hello Dmitry, > > On Fri, Mar 03, 2017 at 02:54:26PM +0100, Dmitry Vyukov wrote: >> The following program triggers use-after-free in zap_page_range: >>

Re: mm: use-after-free in zap_page_range

2017-03-08 Thread Dmitry Vyukov
On Fri, Mar 3, 2017 at 5:23 PM, Andrea Arcangeli wrote: > Hello Dmitry, > > On Fri, Mar 03, 2017 at 02:54:26PM +0100, Dmitry Vyukov wrote: >> The following program triggers use-after-free in zap_page_range: >>

Re: mm: use-after-free in zap_page_range

2017-03-03 Thread Andrea Arcangeli
Hello Dmitry, On Fri, Mar 03, 2017 at 02:54:26PM +0100, Dmitry Vyukov wrote: > The following program triggers use-after-free in zap_page_range: > https://gist.githubusercontent.com/dvyukov/b59dfbaa0cb1e5231094d228fa57c9bd/raw/95c4da18cb96f8aaa47c10012d8c4484fd5917ad/gistfile1.txt I posted the

Re: mm: use-after-free in zap_page_range

2017-03-03 Thread Andrea Arcangeli
Hello Dmitry, On Fri, Mar 03, 2017 at 02:54:26PM +0100, Dmitry Vyukov wrote: > The following program triggers use-after-free in zap_page_range: > https://gist.githubusercontent.com/dvyukov/b59dfbaa0cb1e5231094d228fa57c9bd/raw/95c4da18cb96f8aaa47c10012d8c4484fd5917ad/gistfile1.txt I posted the

mm: use-after-free in zap_page_range

2017-03-03 Thread Dmitry Vyukov
Hello, Yesterday Andrea helped me to extend syzkaller descriptions to accommodate the new userfaultfd features: https://github.com/google/syzkaller/commit/e7fc37e3cc9909ac38afc13e4f00c299d05cabf5 And here we go. UFFDIO_API seems to be necessary to trigger this. If you add new APIs don't neglect

mm: use-after-free in zap_page_range

2017-03-03 Thread Dmitry Vyukov
Hello, Yesterday Andrea helped me to extend syzkaller descriptions to accommodate the new userfaultfd features: https://github.com/google/syzkaller/commit/e7fc37e3cc9909ac38afc13e4f00c299d05cabf5 And here we go. UFFDIO_API seems to be necessary to trigger this. If you add new APIs don't neglect