Re: KASAN: slab-out-of-bounds Read in usbnet_generic_cdc_bind

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: Andrey Konovalov <andreyknvl@xxxxxxxxxx>, syzbot <syzbot+45a53506b65321c1fe91@xxxxxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: KASAN: slab-out-of-bounds Read in usbnet_generic_cdc_bind
From: Oliver Neukum <oneukum@xxxxxxxx>
Date: Tue, 13 Aug 2019 11:27:14 +0200
Cc: "David S. Miller" <davem@xxxxxxxxxxxxx>, syzkaller-bugs <syzkaller-bugs@xxxxxxxxxxxxxxxx>, Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>, LKML <linux-kernel@xxxxxxxxxxxxxxx>, USB list <linux-usb@xxxxxxxxxxxxxxx>, netdev <netdev@xxxxxxxxxxxxxxx>
In-reply-to: <CAAeHK+wELVfuQPJaOeG7KggR2BDTOuzCYLC+dzqbhrRRPNf9cA@mail.gmail.com>
References: <000000000000487b44058fea845c@google.com> <CAAeHK+wELVfuQPJaOeG7KggR2BDTOuzCYLC+dzqbhrRRPNf9cA@mail.gmail.com>

Am Montag, den 12.08.2019, 14:27 +0200 schrieb Andrey Konovalov:
> On
> This one is funny, we do sizeof(struct usb_cdc_mdlm_desc *) instead of
> sizeof(struct usb_cdc_mdlm_desc) and the same for
> usb_cdc_mdlm_detail_desc in cdc_parse_cdc_header().

You are right. Old copy & paste error presumably.
Patch is on the way.

	Regards
		Oliver

References:
- KASAN: slab-out-of-bounds Read in usbnet_generic_cdc_bind
  - From: syzbot
- Re: KASAN: slab-out-of-bounds Read in usbnet_generic_cdc_bind
  - From: Andrey Konovalov

Prev by Date: Re: [PATCH] media: em28xx: modules workqueue not inited for 2nd device
Next by Date: [PATCH] USB: CDC: fix sanity checks in CDC union parser
Previous by thread: Re: KASAN: slab-out-of-bounds Read in usbnet_generic_cdc_bind
Next by thread: KASAN: slab-out-of-bounds Write in ax_probe
Index(es):
- Date
- Thread

[Index of Archives] [Linux Media] [Linux Input] [Linux Audio Users] [Yosemite News] [Linux Kernel] [Linux SCSI] [Old Linux USB Devel Archive]

Powered by Linux