syzbot


KASAN: use-after-free Read in j1939_session_get_by_addr_locked
Status: fixed on 2019/11/29 15:48
Reported-by: syzbot+ca172a0ac477ac90f045@syzkaller.appspotmail.com
Fix commit: ddeeb7d4822e can: j1939: j1939_can_recv(): add priv refcounting
First crash: 759d, last: 759d

Cause bisection: introduced by (bisect log) :
commit 9d71dd0c70099914fcd063135da3c580865e924c
Author: The j1939 authors <linux-can@vger.kernel.org>
Date: Mon Oct 8 09:48:36 2018 +0000

  can: add support of SAE J1939 protocol

Crash: general protection fault in j1939_sk_sendmsg (log)
Repro: C syz .config

Sample crash report:

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce 2019/11/10 19:16 upstream 00aff6836241 dc438b91 .config log report syz C