syzbot


general protection fault in ima_free_template_entry
Status: upstream: reported C repro on 2020/06/04 14:23
Reported-by: syzbot+223310b454ba6b75974e@syzkaller.appspotmail.com
Fix commit: 42413b49 ima: Directly free *entry in ima_alloc_init_template() if digests is NULL
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-upstream-bpf-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-upstream-bpf-next-kasan-gce ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386]
First crash: 30d, last: 10d

Cause bisection: introduced by (bisect log):

commit aa724fe18a8a8285d0071c3bfc932efb090d142d
Author: Roberto Sassu <roberto.sassu@huawei.com>
Date: Wed Mar 25 10:47:09 2020 +0000

  ima: Switch to dynamically allocated buffer for template digests

Crash: general protection fault in ima_free_template_entry (log)
Repro: C syz .config

Sample crash report:

Crashes (3):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-linux-next-kasan-gce-root 2020/06/04 05:23 linux-next e7b08814 a5ce5de0 .config log report syz C dmitry.kasatkin@gmail.com, jmorris@namei.org, linux-integrity@vger.kernel.org, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, serge@hallyn.com, zohar@linux.ibm.com
ci-upstream-linux-next-kasan-gce-root 2020/06/24 18:47 linux-next e7b08814 54566aff .config log report dmitry.kasatkin@gmail.com, jmorris@namei.org, linux-integrity@vger.kernel.org, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, serge@hallyn.com, zohar@linux.ibm.com
ci-upstream-linux-next-kasan-gce-root 2020/06/04 05:03 linux-next e7b08814 a5ce5de0 .config log report dmitry.kasatkin@gmail.com, jmorris@namei.org, linux-integrity@vger.kernel.org, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, serge@hallyn.com, zohar@linux.ibm.com