Re: [PATCH] NFC: port100: fix use-after-free in port100_send_complete

From: Pavel Skripkin
Date: Wed Mar 09 2022 - 16:22:16 EST


On 3/9/22 21:27, Pavel Skripkin wrote:
Hi Krzysztof,

On 3/9/22 12:52, Krzysztof Kozlowski wrote:


Reviewed-by: Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxxxxx>

Thanks, this looks good. I think I saw similar patterns also in other
drivers, e.g. pn533. I will check it later, but if you have spare time,
feel free to investigate.

Similar cases (unresolved):
https://syzkaller.appspot.com/bug?extid=1dc8b460d6d48d7ef9ca

This one is crazy :) No logs from driver at all. Even can't find where probe failure comes from (or even is there any failures...)

https://syzkaller.appspot.com/bug?extid=abd2e0dafb481b621869

Looks like this patch fixes it.

https://syzkaller.appspot.com/bug?extid=dbec6695a6565a9c6bc0


This one is already fixed. Fix bisection is bogus, but this bug is not reproducible anymore.



With regards,
Pavel Skripkin