[lkml]   [2019]   [Jan]   [1]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: KASAN: slab-out-of-bounds Read in tun_net_xmit (2)

On 2018/12/31 下午5:51, Jesper Dangaard Brouer wrote:
> Hi MST and Jason,
> Could you please take a look at this? This bug is caused by a thread
> resizing the tun-queue (via tun_queue_resize -> ptr_ring_resize_multiple).
> And error happens in tun_net_xmit -> ptr_ring_produce. My guess is bug
> happens when reading r->queue in ptr_ring_produce.
> I've look at the code (see diff comments below), but I cannot spot the
> issue as the (implicit) memory barrier of a spinlock should cover the
> cases I can imagine.


Cong sent a patch for this and looks like it was fixed in


 \ /
  Last update: 2019-01-02 04:33    [W:0.066 / U:0.220 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site