Re: KASAN: use-after-free Read in uif_close

[Arnd Bergmann]

On Sun, May 24, 2020 at 10:09 AM Richard Weinberger <richard@xxxxxx> wrote:
>
> ----- UrsprÃngliche Mail -----
> > Von: "syzbot" <syzbot+0ce97ea45b008ba3b8bd@xxxxxxxxxxxxxxxxxxxxxxxxx>
> > An: "Arnd Bergmann" <arnd@xxxxxxxx>, "daniel baluta" <daniel.baluta@xxxxxxx>, "festevam" <festevam@xxxxxxxxx>, "Greg
> > Kroah-Hartman" <gregkh@xxxxxxxxxxxxxxxxxxx>, "kernel" <kernel@xxxxxxxxxxxxxx>, "linux-arm-kernel"
> > <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>, "linux-imx" <linux-imx@xxxxxxx>, "linux-kernel" <linux-kernel@xxxxxxxxxxxxxxx>,
> > "linux-mtd" <linux-mtd@xxxxxxxxxxxxxxxxxxx>, linux@xxxxxxxxxxxxxxxx, "Miquel Raynal" <miquel.raynal@xxxxxxxxxxx>,
> > "richard" <richard@xxxxxx>, "Sascha Hauer" <s.hauer@xxxxxxxxxxxxxx>, "shawnguo" <shawnguo@xxxxxxxxxx>,
> > syzkaller-bugs@xxxxxxxxxxxxxxxx, "Vignesh Raghavendra" <vigneshr@xxxxxx>
> > Gesendet: Sonntag, 24. Mai 2020 08:03:03
> > Betreff: Re: KASAN: use-after-free Read in uif_close
>
> > syzbot has bisected this bug to:
> >
> > commit 32ec783ae19d48084b893cc54747fed37b07eb0c
> > Author: Arnd Bergmann <arnd@xxxxxxxx>
> > Date:   Wed Apr 8 19:02:57 2020 +0000
> >
> >    firmware: imx: fix compile-testing
>
> Hmm, from a quick check I don't see how this is related.
> Arnd?

I suppose this was a randconfig build for a configuration that did not build
until I fixed the build stage, and then it failed at runtime, so the bug would
have been in earlier releases as well, it was just not observed.

     Arnd