Re: KASAN: slab-out-of-bounds Read in bpf_skb_vlan_push

From: Daniel Borkmann
Date: Wed Jun 13 2018 - 14:42:38 EST


On 06/13/2018 08:34 PM, syzbot wrote:
> Hello,
>
> syzbot has tested the proposed patch and the reproducer did not trigger crash:
>
> Reported-and-tested-by: syzbot+76de61614cb1abdd73fc@xxxxxxxxxxxxxxxxxxxxxxxxx
>
> Tested on:
>
> commit:ÂÂÂÂÂÂÂÂ be779f03d563 Merge tag 'kbuild-v4.18-2' of git://git.kerne..
> git tree:ÂÂÂÂÂÂ git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/--
> kernel config:Â https://syzkaller.appspot.com/x/.config?x=68d8eba98e3f8e88
> compiler:ÂÂÂÂÂÂ gcc (GCC) 8.0.1 20180413 (experimental)
>
> Note: testing is done by a robot and is best-effort only.

#syz fix: bpf: reject passing modified ctx to helper functions