syzbot


WARNING in drm_mode_createblob_ioctl
Status: fixed on 2020/01/08 01:06
Reported-by: syzbot+fb77e97ebf0612ee6914@syzkaller.appspotmail.com
Fix commit: 5bf8bec3 drm: limit to INT_MAX in create_blob ioctl
First crash: 304d, last: 280d

Cause bisection: introduced by (bisect log):

commit 9e5a64c71b2f70ba530f8156046dd7dfb8a7a0ba
Author: Kees Cook <keescook@chromium.org>
Date: Mon Nov 4 22:57:23 2019 +0000

  uaccess: disallow > INT_MAX copy sizes

Crash: WARNING in drm_mode_createblob_ioctl (log)
Repro: C syz .config

Sample crash report:

Crashes (7):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-linux-next-kasan-gce-root 2019/11/06 12:29 linux-next 51309b9d bc2c6e45 .config log report syz C airlied@linux.ie, daniel@ffwll.ch, dri-devel@lists.freedesktop.org, linux-kernel@vger.kernel.org, maarten.lankhorst@linux.intel.com, mripard@kernel.org, sean@poorly.run
ci-upstream-linux-next-kasan-gce-root 2019/11/06 11:09 linux-next 51309b9d bc2c6e45 .config log report airlied@linux.ie, daniel@ffwll.ch, dri-devel@lists.freedesktop.org, linux-kernel@vger.kernel.org, maarten.lankhorst@linux.intel.com, mripard@kernel.org, sean@poorly.run
ci-upstream-linux-next-kasan-gce-root 2019/10/19 09:40 linux-next c4b9850b 8c88c9c1 .config log report airlied@linux.ie, daniel@ffwll.ch, dri-devel@lists.freedesktop.org, linux-kernel@vger.kernel.org, maarten.lankhorst@linux.intel.com, mripard@kernel.org, sean@poorly.run
ci-upstream-linux-next-kasan-gce-root 2019/10/18 23:58 linux-next c4b9850b 8c88c9c1 .config log report airlied@linux.ie, daniel@ffwll.ch, dri-devel@lists.freedesktop.org, linux-kernel@vger.kernel.org, maarten.lankhorst@linux.intel.com, mripard@kernel.org, sean@poorly.run
ci-upstream-linux-next-kasan-gce-root 2019/10/18 17:02 linux-next c4b9850b 8c88c9c1 .config log report airlied@linux.ie, daniel@ffwll.ch, dri-devel@lists.freedesktop.org, linux-kernel@vger.kernel.org, maarten.lankhorst@linux.intel.com, mripard@kernel.org, sean@poorly.run
ci-upstream-linux-next-kasan-gce-root 2019/10/13 06:56 linux-next 8ada228a 426631dd .config log report airlied@linux.ie, daniel@ffwll.ch, dri-devel@lists.freedesktop.org, linux-kernel@vger.kernel.org, maarten.lankhorst@linux.intel.com, mripard@kernel.org, sean@poorly.run
ci-upstream-linux-next-kasan-gce-root 2019/10/13 06:56 linux-next 8ada228a 426631dd .config log report airlied@linux.ie, daniel@ffwll.ch, dri-devel@lists.freedesktop.org, linux-kernel@vger.kernel.org, maarten.lankhorst@linux.intel.com, mripard@kernel.org, sean@poorly.run