The patch titled Subject: kasan: test: only do kmalloc_uaf_memset for generic mode has been added to the -mm tree. Its filename is kasan-test-only-do-kmalloc_uaf_memset-for-generic-mode.patch This patch should soon appear at https://ozlabs.org/~akpm/mmots/broken-out/kasan-test-only-do-kmalloc_uaf_memset-for-generic-mode.patch and later at https://ozlabs.org/~akpm/mmotm/broken-out/kasan-test-only-do-kmalloc_uaf_memset-for-generic-mode.patch Before you just go and hit "reply", please: a) Consider who else should be cc'ed b) Prefer to cc a suitable mailing list as well c) Ideally: find the original patch on the mailing list and do a reply-to-all to that, adding suitable additional cc's *** Remember to use Documentation/process/submit-checklist.rst when testing your code *** The -mm tree is included into linux-next and is updated there every 3-4 working days ------------------------------------------------------ From: Andrey Konovalov <andreyknvl@xxxxxxxxx> Subject: kasan: test: only do kmalloc_uaf_memset for generic mode kmalloc_uaf_memset() writes to freed memory, which is only safe with the GENERIC mode (as it uses quarantine). For other modes, this test corrupts kernel memory, which might result in a crash. Only enable kmalloc_uaf_memset() for the GENERIC mode. Link: https://lkml.kernel.org/r/2e1c87b607b1292556cde3cab2764f108542b60c.1628779805.git.andreyknvl@xxxxxxxxx Signed-off-by: Andrey Konovalov <andreyknvl@xxxxxxxxx> Reviewed-by: Marco Elver <elver@xxxxxxxxxx> Cc: Alexander Potapenko <glider@xxxxxxxxxx> Cc: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx> Cc: Dmitry Vyukov <dvyukov@xxxxxxxxxx> Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx> --- lib/test_kasan.c | 6 ++++++ 1 file changed, 6 insertions(+) --- a/lib/test_kasan.c~kasan-test-only-do-kmalloc_uaf_memset-for-generic-mode +++ a/lib/test_kasan.c @@ -534,6 +534,12 @@ static void kmalloc_uaf_memset(struct ku char *ptr; size_t size = 33; + /* + * Only generic KASAN uses quarantine, which is required to avoid a + * kernel memory corruption this test causes. + */ + KASAN_TEST_NEEDS_CONFIG_ON(test, CONFIG_KASAN_GENERIC); + ptr = kmalloc(size, GFP_KERNEL); KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); _ Patches currently in -mm which might be from andreyknvl@xxxxxxxxx are kasan-test-rework-kmalloc_oob_right.patch kasan-test-avoid-writing-invalid-memory.patch kasan-test-avoid-corrupting-memory-via-memset.patch kasan-test-disable-kmalloc_memmove_invalid_size-for-hw_tags.patch kasan-test-only-do-kmalloc_uaf_memset-for-generic-mode.patch kasan-test-clean-up-ksize_uaf.patch kasan-test-avoid-corrupting-memory-in-copy_user_test.patch kasan-test-avoid-corrupting-memory-in-kasan_rcu_uaf.patch