Title | Replies (including bot) | Last reply |
---|---|---|
[PATCH] jfs: fix a oob in dtSplitRoot | 1 (1) | 2024/11/29 11:16 |
[syzbot] [jfs?] UBSAN: array-index-out-of-bounds in dtSplitRoot (2) | 1 (3) | 2024/11/29 02:15 |
syzbot |
sign-in | mailing list | source | docs |
Title | Replies (including bot) | Last reply |
---|---|---|
[PATCH] jfs: fix a oob in dtSplitRoot | 1 (1) | 2024/11/29 11:16 |
[syzbot] [jfs?] UBSAN: array-index-out-of-bounds in dtSplitRoot (2) | 1 (3) | 2024/11/29 02:15 |
Kernel | Title | Repro | Cause bisect | Fix bisect | Count | Last | Reported | Patched | Status |
---|---|---|---|---|---|---|---|---|---|
upstream | UBSAN: array-index-out-of-bounds in dtSplitRoot jfs | C | error | inconclusive | 2 | 453d | 780d | 25/28 | fixed on 2024/01/30 15:47 |
linux-4.19 | KASAN: slab-out-of-bounds Read in dtSplitRoot | C | error | 1 | 782d | 782d | 0/1 | upstream: reported C repro on 2022/10/14 11:28 | |
linux-4.14 | KASAN: slab-out-of-bounds Read in dtSplitRoot | C | 1 | 646d | 780d | 0/1 | upstream: reported C repro on 2022/10/15 22:33 |
... Log Wrap ... Log Wrap ... Log Wrap ... find_entry called with index >= next_index ------------[ cut here ]------------ UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:1997:37 index -128 is out of range for type 'struct dtslot[128]' CPU: 1 UID: 0 PID: 5842 Comm: syz-executor268 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 ubsan_epilogue lib/ubsan.c:231 [inline] __ubsan_handle_out_of_bounds+0x121/0x150 lib/ubsan.c:429 dtSplitRoot+0xc9c/0x1930 fs/jfs/jfs_dtree.c:1997 dtSplitUp fs/jfs/jfs_dtree.c:992 [inline] dtInsert+0x12cd/0x6c10 fs/jfs/jfs_dtree.c:870 jfs_symlink+0x827/0x10f0 fs/jfs/namei.c:1020 vfs_symlink+0x137/0x2e0 fs/namei.c:4669 do_symlinkat+0x222/0x3a0 fs/namei.c:4695 __do_sys_symlink fs/namei.c:4716 [inline] __se_sys_symlink fs/namei.c:4714 [inline] __x64_sys_symlink+0x7a/0x90 fs/namei.c:4714 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb144f8c6f9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffc1536c068 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 RAX: ffffffffffffffda RBX: 00007ffc1536c248 RCX: 00007fb144f8c6f9 RDX: 00007fb144f8b791 RSI: 0000000020000180 RDI: 0000000020000700 RBP: 00007fb145005610 R08: 000000000000620d R09: 0000000000000000 R10: 00007ffc1536bf30 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc1536c238 R14: 0000000000000001 R15: 0000000000000001 </TASK> ---[ end trace ]---
Time | Kernel | Commit | Syzkaller | Config | Log | Report | Syz repro | C repro | VM info | Assets (help?) | Manager | Title |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2024/11/25 00:57 | upstream | 9f16d5e6f220 | 68da6d95 | .config | strace log | report | syz / log | C | [disk image] [vmlinux] [kernel image] [mounted in repro] | ci2-upstream-fs | UBSAN: array-index-out-of-bounds in dtSplitRoot | |
2024/11/25 00:06 | upstream | 9f16d5e6f220 | 68da6d95 | .config | strace log | report | syz / log | C | [disk image] [vmlinux] [kernel image] [mounted in repro] | ci2-upstream-fs | UBSAN: array-index-out-of-bounds in dtSplitRoot | |
2024/12/01 20:12 | upstream | bcc8eda6d349 | 68914665 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-upstream-fs | UBSAN: array-index-out-of-bounds in dtSplitRoot | ||
2024/11/30 01:46 | upstream | 509f806f7f70 | 68914665 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-upstream-fs | UBSAN: array-index-out-of-bounds in dtSplitRoot | ||
2024/11/24 23:17 | upstream | 9f16d5e6f220 | 68da6d95 | .config | console log | report | info | [disk image] [vmlinux] [kernel image] | ci2-upstream-fs | UBSAN: array-index-out-of-bounds in dtSplitRoot |