Re: [syzbot] KASAN: slab-out-of-bounds Read in squashfs_get_id

From: Dmitry Vyukov
Date: Thu Mar 11 2021 - 10:05:05 EST


On Thu, Mar 11, 2021 at 12:23 PM syzbot
<syzbot+8e28bba73ed1772a6802@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
>
> syzbot suspects this issue was fixed by commit:
>
> commit e812cbbbbbb15adbbbee176baa1e8bda53059bf0
> Author: Phillip Lougher <phillip@xxxxxxxxxxxxxxx>
> Date: Tue Feb 9 21:41:50 2021 +0000
>
> squashfs: avoid out of bounds writes in decompressors
>
> bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=11bfa48ad00000
> start commit: cd796ed3 Merge tag 'trace-v5.10-rc7' of git://git.kernel.o..
> git tree: upstream
> kernel config: https://syzkaller.appspot.com/x/.config?x=59df2a4dced5f928
> dashboard link: https://syzkaller.appspot.com/bug?extid=8e28bba73ed1772a6802
> syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1138f80f500000
> C reproducer: https://syzkaller.appspot.com/x/repro.c?x=125e080f500000
>
> If the result looks correct, please mark the issue as fixed by replying with:
>
> #syz fix: squashfs: avoid out of bounds writes in decompressors
>
> For information about bisection process see: https://goo.gl/tpsmEJ#bisection

Looks reasonable:

#syz fix: squashfs: avoid out of bounds writes in decompressors