|
KMSAN: uninit-value in sctp_inq_pop (3)
sctp
|
7 |
syz, C |
|
|
9 |
376d |
376d
|
29/29 |
297d |
51e5ad549c43
net: sctp: fix KMSAN uninit-value in sctp_inq_pop
|
|
BUG: corrupted list in sctp_destroy_sock
sctp
|
8 |
syz, C |
done |
|
10 |
355d |
359d
|
29/29 |
297d |
73edb26b06ea
sctp: Don't inherit do_auto_asconf in sctp_clone_sock().
|
|
KMSAN: uninit-value in sctp_inq_pop (2)
sctp
|
7 |
syz, C |
|
|
4089 |
444d |
1758d
|
29/29 |
388d |
fd60d8a08619
sctp: linearize cloned gso packets in sctp_rcv
|
|
KMSAN: uninit-value in sctp_assoc_bh_rcv
sctp
|
7 |
syz, C |
|
|
258 |
444d |
575d
|
29/29 |
388d |
fd60d8a08619
sctp: linearize cloned gso packets in sctp_rcv
|
|
KMSAN: uninit-value in __sctp_v6_cmp_addr (2)
sctp
|
7 |
syz, C |
|
|
9 |
432d |
431d
|
29/29 |
388d |
2e8750469242
sctp: initialize more fields in sctp_v6_from_sk()
|
|
KMSAN: uninit-value in sctp_sf_ootb
sctp
|
7 |
syz, C |
|
|
18 |
728d |
796d
|
28/29 |
689d |
0ead60804b64
sctp: properly validate chunk size in sctp_sf_ootb()
|
|
INFO: rcu detected stall in rtnl_newlink (4)
driver-core
sctp
fs
|
1 |
syz, C |
error |
|
9 |
899d |
975d
|
25/29 |
892d |
b1f532a3b1e6
batman-adv: Avoid infinite loop trying to resize local TT
|
|
memory leak in sctp_packet_transmit
sctp
|
3 |
syz, C |
|
|
14 |
1075d |
2292d
|
25/29 |
949d |
4e45170d9acc
net: sctp: fix skb leak in sctp_inq_free()
|
|
general protection fault in sctp_outq_tail
sctp
|
8 |
syz, C |
error |
|
5 |
1307d |
1319d
|
22/29 |
1241d |
2584024b2355
sctp: check send stream number after wait_for_sndbuf
|
|
memory leak in sctp_sched_prio_set
sctp
|
3 |
syz, C |
|
|
2 |
1438d |
1444d
|
22/29 |
1345d |
9ed7bfc79542
sctp: fix memory leak in sctp_stream_outq_migrate()
|
|
KASAN: use-after-free Write in sctp_auth_shkey_hold (2)
sctp
|
22 |
syz, C |
inconclusive |
|
7 |
1497d |
1496d
|
22/29 |
1345d |
022152aaebe1
sctp: handle the error returned from sctp_auth_asoc_init_active_key
|
|
KASAN: use-after-free Read in __lock_sock
sctp
|
19 |
syz |
done |
error |
26 |
2090d |
2906d
|
20/29 |
1698d |
5ec7d18d1813
sctp: use call_rcu to free endpoint
|
|
KASAN: use-after-free Write in sctp_auth_shkey_hold
sctp
|
22 |
syz, C |
done |
|
4 |
1930d |
1938d
|
20/29 |
1817d |
58acd1009226
sctp: update active_key for asoc when old key is being replaced
|
|
possible deadlock in sctp_addr_wq_timeout_handler
sctp
|
4 |
syz, C |
done |
|
8 |
2010d |
2010d
|
20/29 |
1817d |
01bfe5e8e428
Revert "net/sctp: fix race condition in sctp_destroy_sock"
|
|
KASAN: use-after-free Read in sctp_auth_free
sctp
|
19 |
syz, C |
done |
|
4 |
2214d |
2215d
|
15/29 |
2175d |
d42ee76ecb6c
net-backports: sctp: fix sctp_auth_init_hmacs() error path
|
|
KASAN: slab-out-of-bounds Write in sctp_setsockopt
sctp
|
21 |
syz, C |
error |
|
590 |
2287d |
2292d
|
15/29 |
2236d |
dfd3d5266dc1
sctp: fix slab-out-of-bounds in SCTP_DELAYED_SACK processing
|
|
KASAN: wild-memory-access Read in sctp_setsockopt
sctp
|
17 |
syz, C |
|
|
2 |
2270d |
2270d
|
15/29 |
2236d |
519a8a6cf91d
net: Revert "net: optimize the sockptr_t for unified kernel/user address spaces"
|
|
WARNING: refcount bug in sctp_wfree
sctp
|
13 |
syz, C |
done |
|
20 |
2406d |
2427d
|
15/29 |
2365d |
5c3e82fe1596
sctp: fix refcount bug in sctp_wfree
|
|
memory leak in _sctp_make_chunk
sctp
|
3 |
syz, C |
|
|
1 |
2511d |
2511d
|
15/29 |
2447d |
be7a77292077
sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY
|
|
memory leak in sctp_stream_init
sctp
|
3 |
syz, C |
|
|
1 |
2513d |
2512d
|
15/29 |
2452d |
951c6db954a1
sctp: fix memleak on err handling of stream initialization
|
|
general protection fault in sctp_stream_free (2)
sctp
|
2 |
syz, C |
done |
|
25 |
2497d |
2508d
|
15/29 |
2452d |
61d5d4062876
sctp: fix err handling of stream initialization
|
|
memory leak in sctp_get_port_local (3)
sctp
|
3 |
syz, C |
|
|
4 |
2569d |
2575d
|
13/29 |
2553d |
63dfb7938b13
sctp: change sctp_prot .no_autobind with true
|
|
memory leak in sctp_stream_init_ext
sctp
|
3 |
syz, C |
|
|
34 |
2575d |
2710d
|
13/29 |
2560d |
3c52b0af059e
lib/generic-radix-tree.c: add kmemleak annotations
|
|
kernel BUG at include/linux/skbuff.h:LINE! (2)
sctp
|
-1 |
syz, C |
done |
|
58 |
2623d |
2633d
|
13/29 |
2573d |
c7a42eb49212
net: ipv6: fix listify ip6_rcv_finish in case of forwarding
|
|
memory leak in sctp_get_port_local (2)
sctp
|
3 |
syz, C |
|
|
34 |
2583d |
2641d
|
13/29 |
2579d |
29b99f54a8e6
sctp: destroy bucket if failed to bind addr
|
|
memory leak in sctp_send_reset_streams
sctp
|
3 |
syz, C |
|
|
7 |
2633d |
2710d
|
13/29 |
2584d |
6d5afe20397b
sctp: fix memleak in sctp_send_reset_streams
|
|
memory leak in sctp_get_port_local
sctp
|
3 |
syz, C |
|
|
28 |
2646d |
2713d
|
12/29 |
2644d |
9b6c08878e23
sctp: not bind the socket in sctp_connect
|
|
general protection fault in sctp_sched_prio_sched
sctp
|
2 |
syz, C |
done |
|
3 |
2681d |
2695d
|
12/29 |
2644d |
4d1415811e49
sctp: fix error handling on stream scheduler initialization
|
|
memory leak in sctp_v6_create_accept_sk
sctp
|
3 |
syz, C |
|
|
1 |
2709d |
2708d
|
12/29 |
2651d |
25bff6d5478b
sctp: change to hold sk after auth shkey is created successfully
|
|
memory leak in sctp_v4_create_accept_sk
sctp
|
3 |
syz, C |
|
|
1 |
2688d |
2687d
|
12/29 |
2651d |
25bff6d5478b
sctp: change to hold sk after auth shkey is created successfully
|
|
memory leak in sctp_process_init
sctp
|
3 |
syz, C |
|
|
10 |
2694d |
2714d
|
12/29 |
2670d |
0a8dd9f67cd0
Fix memory leak in sctp_process_init
ce950f1050ce
sctp: Free cookie before we memdup a new one
|
|
general protection fault in sctp_sched_dequeue_common (2)
sctp
|
2 |
syz, C |
done |
|
3 |
2788d |
2788d
|
12/29 |
2687d |
2e990dfd1397
sctp: remove sched init from sctp_stream_init
|
|
KMSAN: kernel-infoleak in sctp_getsockopt (3)
sctp
|
9 |
syz |
|
|
11 |
2762d |
2774d
|
12/29 |
2760d |
09279e615c81
sctp: initialize _pad of sockaddr_in before copying to user memory
|
|
general protection fault in sctp_assoc_rwnd_increase
sctp
|
2 |
syz, C |
done |
|
28 |
2775d |
2790d
|
12/29 |
2761d |
636d25d557d1
sctp: not copy sctp_sock pd_lobby in sctp_copy_descendant
|
|
general protection fault in sctp_sched_rr_dequeue
sctp
|
2 |
syz, C |
done |
|
11 |
2787d |
2797d
|
11/29 |
2774d |
2e990dfd1397
sctp: remove sched init from sctp_stream_init
|
|
KASAN: invalid-free in sctp_stream_free
sctp
|
24 |
syz, C |
|
|
5 |
2819d |
2826d
|
11/29 |
2797d |
af98c5a78517
sctp: set stream ext to NULL after freeing it in sctp_stream_outq_migrate
|
|
KMSAN: kernel-infoleak in sctp_getsockopt (2)
sctp
|
9 |
syz, C |
|
|
16 |
2797d |
2847d
|
11/29 |
2797d |
400b8b9a2a17
sctp: allocate sctp_sockaddr_entry with kzalloc
|
|
KMSAN: kernel-infoleak in sctp_getsockopt
sctp
|
9 |
syz |
|
|
147 |
2851d |
2887d
|
11/29 |
2851d |
4a2eb0c37b47
sctp: initialize sin6_flowinfo for ipv6 addrs in sctp_inet6addr_event
|
|
KASAN: use-after-free Read in sctp_epaddr_lookup_transport
sctp
|
19 |
syz |
|
|
5 |
2905d |
2906d
|
11/29 |
2874d |
fb6df5a6234c
sctp: kfree_rcu asoc
|
|
KASAN: slab-out-of-bounds Read in sctp_getsockopt
sctp
|
17 |
syz, C |
|
|
9 |
2928d |
2927d
|
11/29 |
2910d |
713358369382
sctp: check policy more carefully when getting pr status
|
|
KASAN: use-after-free Read in sctp_transport_get_next
sctp
|
19 |
syz, C |
|
|
6 |
2988d |
2991d
|
10/29 |
2973d |
bab1be79a516
sctp: hold transport before accessing its asoc in sctp_transport_get_next
|
|
INFO: rcu detected stall in save_stack_trace
sctp
|
1 |
syz, C |
|
|
1 |
3087d |
3085d
|
8/29 |
3036d |
1d88ba1ebb27
sctp: not allow transport timeout value less than HZ/5 for hb_timer
|
|
KMSAN: uninit-value in __sctp_v6_cmp_addr
sctp
|
7 |
syz, C |
|
|
1109 |
3090d |
3091d
|
5/29 |
3090d |
d625329b06e4
sctp: handle two v4 addrs comparison in sctp_inet6_cmp_addr
|
|
KASAN: slab-out-of-bounds Read in __sctp_v6_cmp_addr
sctp
|
17 |
syz, C |
|
|
3202 |
3102d |
3114d
|
5/29 |
3090d |
d625329b06e4
sctp: handle two v4 addrs comparison in sctp_inet6_cmp_addr
|
|
KASAN: use-after-free Read in sctp_association_free (2)
sctp
|
19 |
syz, C |
|
|
2 |
3158d |
3158d
|
5/29 |
3098d |
0aee4c259849
sctp: Fix double free in sctp_sendmsg_to_asoc
|
|
KMSAN: uninit-value in sctp_do_bind
sctp
|
7 |
syz, C |
|
|
31 |
3099d |
3129d
|
5/29 |
3098d |
81e98370293a
sctp: sctp_sockaddr_af must check minimal addr length for AF_INET6
|
|
KMSAN: uninit-value in sctp_sendmsg
sctp
|
7 |
syz |
|
|
27 |
3099d |
3128d
|
5/29 |
3098d |
81e98370293a
sctp: sctp_sockaddr_af must check minimal addr length for AF_INET6
|
|
WARNING in refcount_sub_and_test
sctp
|
-1 |
syz, C |
|
|
75150 |
3193d |
3294d
|
4/29 |
3155d |
d04adf1b3551
sctp: reset owner sk for data chunks on out queues when migrating a sock
|
|
KASAN: use-after-free Read in sctp_association_free
sctp
|
19 |
syz, C |
|
|
20 |
3271d |
3286d
|
4/29 |
3194d |
ca3af4dd28cf
sctp: do not free asoc when it is already dead in sctp_sendmsg
|
|
KASAN: slab-out-of-bounds Read in sctp_send_reset_streams
sctp
|
17 |
syz, C |
|
|
73 |
3237d |
3248d
|
4/29 |
3194d |
2342b8d95bca
sctp: make sure stream nums can match optlen in sctp_setsockopt_reset_streams
|
|
general protection fault in skb_segment
sctp
|
2 |
syz, C |
|
|
7 |
3218d |
3228d
|
4/29 |
3198d |
121d57af308d
gso: validate gso_type in GSO handlers
|
|
general protection fault in sctp_v6_get_dst
sctp
|
2 |
syz, C |
|
|
6 |
3216d |
3216d
|
4/29 |
3204d |
c5006b8aa745
sctp: do not allow the v4 socket to bind a v4mapped v6 address
|
|
WARNING: held lock freed!
sctp
|
-1 |
syz, C |
|
|
497 |
3208d |
3219d
|
4/29 |
3204d |
a0ff660058b8
sctp: return error if the asoc has been peeled off in sctp_wait_for_sndbuf
|