syzbot


KASAN: use-after-free Read in LZ4_decompress_safe_partial
Status: upstream: reported C repro on 2021/10/29 14:55
Reported-by: syzbot+63d688f1d899c588fb71@syzkaller.appspotmail.com
Fix commit: lz4: fix LZ4_decompress_safe_partial read out of bound
Patched on: [ci-upstream-linux-next-kasan-gce-root], missing on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb]
First crash: 37d, last: 1d08h

Cause bisection: introduced by (bisect log) :
commit f86cf25a609107960cf05263e491463feaae1f99
Author: Gao Xiang <gaoxiang25@huawei.com>
Date: Tue Aug 28 03:39:48 2018 +0000

  Revert "staging: erofs: disable compiling temporarile"

Crash: KASAN: use-after-free Write in __d_rehash (log)
Repro: C syz .config

Sample crash report:

Crashes (10):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-smack-root 2021/10/25 14:59 upstream 87066fdd2e30 4f0000ee .config log report syz C KASAN: use-after-free Read in LZ4_decompress_safe_partial
ci-upstream-kasan-gce-root 2021/11/30 08:39 upstream d58071a8a76d d0830353 .config log report info KASAN: use-after-free Read in LZ4_decompress_safe_partial
ci-upstream-kasan-gce-root 2021/11/21 07:09 upstream 923dcc5eb0c1 4eb20a4e .config log report info KASAN: use-after-free Read in LZ4_decompress_safe_partial
ci-upstream-kasan-gce-root 2021/11/16 05:44 upstream 8ab774587903 83f5c9b5 .config log report info KASAN: use-after-free Read in LZ4_decompress_safe_partial
ci-upstream-kasan-gce-root 2021/11/12 03:26 upstream 5833291ab6de 75b04091 .config log report info KASAN: use-after-free Read in LZ4_decompress_safe_partial
ci-upstream-kasan-gce-root 2021/11/06 21:31 upstream d4439a1189f9 4c1be0be .config log report info KASAN: use-after-free Read in LZ4_decompress_safe_partial
ci-upstream-kasan-gce-root 2021/11/05 21:51 upstream d4439a1189f9 4c1be0be .config log report info KASAN: use-after-free Read in LZ4_decompress_safe_partial
ci-upstream-kasan-gce-root 2021/11/05 05:16 upstream 7ddb58cb0eca 4c1be0be .config log report info KASAN: use-after-free Read in LZ4_decompress_safe_partial
ci-upstream-kasan-gce-smack-root 2021/10/25 14:44 upstream 87066fdd2e30 4f0000ee .config log report info KASAN: use-after-free Read in LZ4_decompress_safe_partial
ci-upstream-linux-next-kasan-gce-root 2021/10/25 14:45 linux-next 9ae1fbdeabd3 4f0000ee .config log report info KASAN: use-after-free Read in LZ4_decompress_safe_partial