lkml.org 
[lkml]   [2020]   [May]   [24]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    Date
    SubjectRe: [PATCH] twist: allow converting pr_devel()/pr_debug() into printk(KERN_DEBUG)
    On Sun, May 24, 2020 at 7:38 PM Joe Perches <joe@perches.com> wrote:
    > On Sun, 2020-05-24 at 23:50 +0900, Tetsuo Handa wrote:
    > > syzbot found a NULL pointer dereference bug inside mptcp_recvmsg() due to
    > > ssock == NULL, but this bug manifested inside selinux_socket_recvmsg()
    > > because pr_debug() was no-op [1].
    > >
    > > pr_debug("fallback-read subflow=%p",
    > > mptcp_subflow_ctx(ssock->sk));
    > > copied = sock_recvmsg(ssock, msg, flags);
    >
    > > Since console loglevel used by syzkaller will not print KERN_DEBUG
    > > messages to consoles, always evaluating pr_devel()/pr_debug() messages
    > > will not cause too much console output. Thus, let's allow fuzzers to
    > > always evaluate pr_devel()/pr_debug() messages.
    >
    > While I think this is rather unnecessary,
    > what about dev_dbg/netdev_dbg/netif_dbg et al ?

    I'm also not sure if this is really worth it... It would help localize
    the bug in this specific case, but there is nothing systematic about
    it. Are there that many debug print statements that dereference
    pointers that are later passed to functions, but not dereferenced
    otherwise? Maybe yes, but it seems to be quite an optimistic
    assumption... I don't consider it such a big problem that a bug in
    function X only manifests itself deeper in the callchain. There will
    always be such bugs, no matter how many moles you whack.

    That said, I'm not strongly opposed to the change either, I just
    wanted to state my opinion in case my reply to the syzbot report [1]
    gave the impression that I considered the "misattribution" as
    something that needs to be fixed :)

    [1] https://lore.kernel.org/selinux/CAFqZXNvf+oJs9u4H97u7=jTL2Wo_Hkf4nZdZJLD7tNC_J0KDRg@mail.gmail.com/

    --
    Ondrej Mosnacek <omosnace at redhat dot com>
    Software Engineer, Security Technologies
    Red Hat, Inc.

    \
     
     \ /
      Last update: 2020-05-24 21:20    [W:3.748 / U:0.016 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site