Re: [PATCH] gfs2: avoid %pS in pr_err() fallback to prevent vsnprintf crash
From: Andreas Gruenbacher
Date: Wed Sep 17 2025 - 06:34:22 EST
On Tue, Sep 16, 2025 at 11:12 PM Kriish Sharma
<kriish.sharma2006@xxxxxxxxx> wrote:
> While debugging a syzbot report, I found that the %pS format in
> dump_holder() can trigger a crash when we end up in the pr_err()
> fallback path. This happens because %pS goes through symbol resolution
> inside vsnprintf, and in this case that isn’t always safe.
I'm unconvinced -- when and why is %pS not safe to use?
Thanks,
Andreas