Re: KASAN: slab-out-of-bounds Write in sha3_final

From: Eric Biggers
Date: Tue Nov 28 2017 - 14:13:16 EST


On Tue, Nov 28, 2017 at 05:24:01AM -0800, syzbot wrote:
> Hello,
>
> syzkaller hit the following crash on
> 6fc478f80f6809cc4b1a4230f47a62d3b7378dc0
> git://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/master
> compiler: gcc (GCC) 7.1.1 20170620
> .config is attached
> Raw console output is attached.
> C reproducer is attached
> syzkaller reproducer is attached. See https://goo.gl/kgGztJ
> for information about syzkaller reproducers
>
>
> ==================================================================
> BUG: KASAN: slab-out-of-bounds in memset include/linux/string.h:326 [inline]
> BUG: KASAN: slab-out-of-bounds in sha3_final+0xeb/0x2e0
> crypto/sha3_generic.c:173
> Write of size 4294967223 at addr ffff8801cc23a759 by task
> syzkaller163089/3049

#syz dup: KASAN: stack-out-of-bounds Write in sha3_update