syzbot


KASAN: use-after-free Read in binder_release_work
Status: fixed on 2018/05/08 18:30
Reported-by: syzbot+0cf1f1aa154f56ff2e8d@syzkaller.appspotmail.com
Fix commit: 7aa135fcf263 ANDROID: binder: prevent transactions into own process.
First crash: 1385d, last: 1364d
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-44 KASAN: use-after-free Read in binder_release_work C 5 1364d 1013d 0/2 public: reported C repro on 2019/04/11 08:44
android-49 KASAN: use-after-free Read in binder_release_work C 132 1364d 1377d 3/3 fixed on 2018/05/22 16:58

Sample crash report:

Crashes (6):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce 2018/04/03 23:50 upstream f2d285669aae 676bd07e .config log report syz C
ci-upstream-kasan-gce-root 2018/04/12 06:09 upstream b284d4d5a678 9cd56d71 .config log report syz
ci-upstream-kasan-gce-root 2018/04/03 23:17 upstream f2d285669aae 676bd07e .config log report syz
ci-upstream-kasan-gce-386 2018/04/03 23:48 upstream f2d285669aae 676bd07e .config log report syz
ci-upstream-kasan-gce 2018/04/25 02:51 upstream 24cac7009cb1 37e76fe2 .config log report
ci-upstream-kasan-gce-root 2018/04/03 23:01 upstream f2d285669aae 676bd07e .config log report