syzbot


panic: malformed IPv4 option passed to ip_optcopy (2)
Status: fixed on 2019/01/19 20:26
Reported-by: syzbot+4da6b6be6ae02a24ff31@syzkaller.appspotmail.com
Fix commit: Bring back the ip_pcbopts() refactor. Pad the option buffer and therefor the mbuf to the next word length as it is required by the standard. Also use the correct offset from the input mbuf. OK visa@, input & OK bluhm@
First crash: 164d, last: 161d
similar bugs (1):
Kernel Title Repro Bisected Count Last Reported Patched Status
openbsd panic: malformed IPv4 option passed to ip_optcopy C 10 181d 190d 3/3 fixed on 2019/01/08 00:18

Sample crash report:

All crashes (149):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro
ci-openbsd-setuid 2019/01/13 07:45 openbsd 5d60bdcf c3f3344c .config log report syz C
ci-openbsd-setuid 2019/01/13 05:20 openbsd 5d60bdcf c3f3344c .config log report syz
ci-openbsd-setuid 2019/01/13 04:58 openbsd 5d60bdcf c3f3344c .config log report
ci-openbsd-multicore 2019/01/16 22:34 openbsd 17e34b32 352bac0d .config log report
ci-openbsd-multicore 2019/01/16 21:28 openbsd 17e34b32 352bac0d .config log report
ci-openbsd-main 2019/01/16 19:33 openbsd 17e34b32 352bac0d .config log report
ci-openbsd-setuid 2019/01/16 18:08 openbsd 17e34b32 352bac0d .config log report
ci-openbsd-setuid 2019/01/16 17:46 openbsd 17e34b32 352bac0d .config log report
ci-openbsd-setuid 2019/01/16 16:35 openbsd 17e34b32 352bac0d .config log report
ci-openbsd-setuid 2019/01/16 14:43 openbsd 17e34b32 352bac0d .config log report
ci-openbsd-setuid 2019/01/16 12:01 openbsd 17e34b32 352bac0d .config log report
ci-openbsd-main 2019/01/16 10:57 openbsd 17e34b32 352bac0d .config log report
ci-openbsd-main 2019/01/16 09:42 openbsd 17e34b32 b47fa78d .config log report
ci-openbsd-setuid 2019/01/16 07:50 openbsd 17e34b32 b47fa78d .config log report
ci-openbsd-multicore 2019/01/16 06:44 openbsd 39356ae6 b47fa78d .config log report
ci-openbsd-main 2019/01/16 05:40 openbsd 39356ae6 b47fa78d .config log report
ci-openbsd-multicore 2019/01/16 03:32 openbsd 39356ae6 b47fa78d .config log report
ci-openbsd-setuid 2019/01/16 02:18 openbsd 39356ae6 b47fa78d .config log report
ci-openbsd-main 2019/01/16 00:00 openbsd 39356ae6 b47fa78d .config log report
ci-openbsd-setuid 2019/01/15 22:38 openbsd 39356ae6 b47fa78d .config log report
ci-openbsd-setuid 2019/01/15 21:29 openbsd 39356ae6 b47fa78d .config log report
ci-openbsd-setuid 2019/01/15 20:16 openbsd 39356ae6 b47fa78d .config log report
ci-openbsd-setuid 2019/01/15 19:42 openbsd 39356ae6 b47fa78d .config log report
ci-openbsd-setuid 2019/01/15 18:05 openbsd 39356ae6 b47fa78d .config log report
ci-openbsd-setuid 2019/01/15 16:31 openbsd a1d3f8bc ebacf5cb .config log report
ci-openbsd-setuid 2019/01/15 14:23 openbsd a1d3f8bc ebacf5cb .config log report
ci-openbsd-setuid 2019/01/15 13:08 openbsd a1d3f8bc ebacf5cb .config log report
ci-openbsd-setuid 2019/01/15 11:19 openbsd a1d3f8bc ebacf5cb .config log report
ci-openbsd-setuid 2019/01/15 09:41 openbsd a1d3f8bc ebacf5cb .config log report
ci-openbsd-multicore 2019/01/15 08:20 openbsd a1d3f8bc ebacf5cb .config log report
ci-openbsd-main 2019/01/15 07:00 openbsd a1d3f8bc ebacf5cb .config log report
ci-openbsd-multicore 2019/01/15 04:57 openbsd febce360 2f3438a8 .config log report
ci-openbsd-setuid 2019/01/15 04:43 openbsd febce360 2f3438a8 .config log report
ci-openbsd-main 2019/01/15 03:08 openbsd febce360 2f3438a8 .config log report
ci-openbsd-setuid 2019/01/15 01:55 openbsd febce360 2f3438a8 .config log report
ci-openbsd-multicore 2019/01/15 00:02 openbsd febce360 2f3438a8 .config log report
ci-openbsd-setuid 2019/01/14 20:08 openbsd febce360 2f3438a8 .config log report
ci-openbsd-setuid 2019/01/14 19:07 openbsd a30f5dcb 2f3438a8 .config log report
ci-openbsd-setuid 2019/01/14 17:18 openbsd a30f5dcb 2f3438a8 .config log report
ci-openbsd-main 2019/01/14 17:01 openbsd a30f5dcb 2f3438a8 .config log report
ci-openbsd-setuid 2019/01/14 15:58 openbsd a30f5dcb 2f3438a8 .config log report
ci-openbsd-setuid 2019/01/14 13:57 openbsd a30f5dcb 2f3438a8 .config log report
ci-openbsd-setuid 2019/01/14 11:49 openbsd a30f5dcb 2f3438a8 .config log report
ci-openbsd-multicore 2019/01/14 10:12 openbsd a30f5dcb 2f3438a8 .config log report
ci-openbsd-setuid 2019/01/14 08:51 openbsd a30f5dcb 2f3438a8 .config log report
ci-openbsd-multicore 2019/01/14 07:47 openbsd a30f5dcb 2f3438a8 .config log report
ci-openbsd-setuid 2019/01/14 06:08 openbsd fd2fcf1a 2f3438a8 .config log report
ci-openbsd-setuid 2019/01/14 05:19 openbsd fd2fcf1a 2f3438a8 .config log report
ci-openbsd-main 2019/01/14 04:45 openbsd fd2fcf1a 2f3438a8 .config log report