commits July 2023

commits@lists.open-mesh.org

1 participants
38 discussions

[linux-merge]linux integration; branch, batadv/net-next, updated. v6.5-rc1
by postmaster＠open-mesh.org 19 Jul '23

19 Jul '23

The following commit has been merged in the batadv/net-next branch: commit abac3ac97fe8734b620e7322a116450d7f90aa43 Author: Vladislav Efanov <VEfanov(a)ispras.ru> Date: Fri May 26 19:16:32 2023 +0300 batman-adv: Broken sync while rescheduling delayed work Syzkaller got a lot of crashes like: KASAN: use-after-free Write in *_timers* All of these crashes point to the same memory area: The buggy address belongs to the object at ffff88801f870000 which belongs to the cache kmalloc-8k of size 8192 The buggy address is located 5320 bytes inside of 8192-byte region [ffff88801f870000, ffff88801f872000) This area belongs to : batadv_priv->batadv_priv_dat->delayed_work->timer_list The reason for these issues is the lack of synchronization. Delayed work (batadv_dat_purge) schedules new timer/work while the device is being deleted. As the result new timer/delayed work is set after cancel_delayed_work_sync() was called. So after the device is freed the timer list contains pointer to already freed memory. Found by Linux Verification Center (linuxtesting.org) with syzkaller. Cc: stable(a)kernel.org Fixes: 2f1dfbe18507 ("batman-adv: Distributed ARP Table - implement local storage") Signed-off-by: Vladislav Efanov <VEfanov(a)ispras.ru> Acked-by: Sven Eckelmann <sven(a)narfation.org> Signed-off-by: Simon Wunderlich <sw(a)simonwunderlich.de> diff --git a/net/batman-adv/distributed-arp-table.c b/net/batman-adv/distributed-arp-table.c index 6968e55eb971..28a939d56090 100644 --- a/net/batman-adv/distributed-arp-table.c +++ b/net/batman-adv/distributed-arp-table.c @@ -101,7 +101,6 @@ static void batadv_dat_purge(struct work_struct *work); */ static void batadv_dat_start_timer(struct batadv_priv *bat_priv) { - INIT_DELAYED_WORK(&bat_priv->dat.work, batadv_dat_purge); queue_delayed_work(batadv_event_workqueue, &bat_priv->dat.work, msecs_to_jiffies(10000)); } @@ -819,6 +818,7 @@ int batadv_dat_init(struct batadv_priv *bat_priv) if (!bat_priv->dat.hash) return -ENOMEM; + INIT_DELAYED_WORK(&bat_priv->dat.work, batadv_dat_purge); batadv_dat_start_timer(bat_priv); batadv_tvlv_handler_register(bat_priv, batadv_dat_tvlv_ogm_handler_v1, -- linux integration

1 0

[linux-merge]linux integration; branch, base/net, updated. v6.5-rc1
by postmaster＠open-mesh.org 19 Jul '23

19 Jul '23

The following commit has been merged in the base/net branch: commit abac3ac97fe8734b620e7322a116450d7f90aa43 Author: Vladislav Efanov <VEfanov(a)ispras.ru> Date: Fri May 26 19:16:32 2023 +0300 batman-adv: Broken sync while rescheduling delayed work Syzkaller got a lot of crashes like: KASAN: use-after-free Write in *_timers* All of these crashes point to the same memory area: The buggy address belongs to the object at ffff88801f870000 which belongs to the cache kmalloc-8k of size 8192 The buggy address is located 5320 bytes inside of 8192-byte region [ffff88801f870000, ffff88801f872000) This area belongs to : batadv_priv->batadv_priv_dat->delayed_work->timer_list The reason for these issues is the lack of synchronization. Delayed work (batadv_dat_purge) schedules new timer/work while the device is being deleted. As the result new timer/delayed work is set after cancel_delayed_work_sync() was called. So after the device is freed the timer list contains pointer to already freed memory. Found by Linux Verification Center (linuxtesting.org) with syzkaller. Cc: stable(a)kernel.org Fixes: 2f1dfbe18507 ("batman-adv: Distributed ARP Table - implement local storage") Signed-off-by: Vladislav Efanov <VEfanov(a)ispras.ru> Acked-by: Sven Eckelmann <sven(a)narfation.org> Signed-off-by: Simon Wunderlich <sw(a)simonwunderlich.de> diff --git a/net/batman-adv/distributed-arp-table.c b/net/batman-adv/distributed-arp-table.c index 6968e55eb971..28a939d56090 100644 --- a/net/batman-adv/distributed-arp-table.c +++ b/net/batman-adv/distributed-arp-table.c @@ -101,7 +101,6 @@ static void batadv_dat_purge(struct work_struct *work); */ static void batadv_dat_start_timer(struct batadv_priv *bat_priv) { - INIT_DELAYED_WORK(&bat_priv->dat.work, batadv_dat_purge); queue_delayed_work(batadv_event_workqueue, &bat_priv->dat.work, msecs_to_jiffies(10000)); } @@ -819,6 +818,7 @@ int batadv_dat_init(struct batadv_priv *bat_priv) if (!bat_priv->dat.hash) return -ENOMEM; + INIT_DELAYED_WORK(&bat_priv->dat.work, batadv_dat_purge); batadv_dat_start_timer(bat_priv); batadv_tvlv_handler_register(bat_priv, batadv_dat_tvlv_ogm_handler_v1, -- linux integration

1 0

[linux-merge]linux integration; branch, base/net-next, updated. v6.5-rc1
by postmaster＠open-mesh.org 19 Jul '23

19 Jul '23

The following commit has been merged in the base/net-next branch: commit abac3ac97fe8734b620e7322a116450d7f90aa43 Author: Vladislav Efanov <VEfanov(a)ispras.ru> Date: Fri May 26 19:16:32 2023 +0300 batman-adv: Broken sync while rescheduling delayed work Syzkaller got a lot of crashes like: KASAN: use-after-free Write in *_timers* All of these crashes point to the same memory area: The buggy address belongs to the object at ffff88801f870000 which belongs to the cache kmalloc-8k of size 8192 The buggy address is located 5320 bytes inside of 8192-byte region [ffff88801f870000, ffff88801f872000) This area belongs to : batadv_priv->batadv_priv_dat->delayed_work->timer_list The reason for these issues is the lack of synchronization. Delayed work (batadv_dat_purge) schedules new timer/work while the device is being deleted. As the result new timer/delayed work is set after cancel_delayed_work_sync() was called. So after the device is freed the timer list contains pointer to already freed memory. Found by Linux Verification Center (linuxtesting.org) with syzkaller. Cc: stable(a)kernel.org Fixes: 2f1dfbe18507 ("batman-adv: Distributed ARP Table - implement local storage") Signed-off-by: Vladislav Efanov <VEfanov(a)ispras.ru> Acked-by: Sven Eckelmann <sven(a)narfation.org> Signed-off-by: Simon Wunderlich <sw(a)simonwunderlich.de> diff --git a/net/batman-adv/distributed-arp-table.c b/net/batman-adv/distributed-arp-table.c index 6968e55eb971..28a939d56090 100644 --- a/net/batman-adv/distributed-arp-table.c +++ b/net/batman-adv/distributed-arp-table.c @@ -101,7 +101,6 @@ static void batadv_dat_purge(struct work_struct *work); */ static void batadv_dat_start_timer(struct batadv_priv *bat_priv) { - INIT_DELAYED_WORK(&bat_priv->dat.work, batadv_dat_purge); queue_delayed_work(batadv_event_workqueue, &bat_priv->dat.work, msecs_to_jiffies(10000)); } @@ -819,6 +818,7 @@ int batadv_dat_init(struct batadv_priv *bat_priv) if (!bat_priv->dat.hash) return -ENOMEM; + INIT_DELAYED_WORK(&bat_priv->dat.work, batadv_dat_purge); batadv_dat_start_timer(bat_priv); batadv_tvlv_handler_register(bat_priv, batadv_dat_tvlv_ogm_handler_v1, -- linux integration

1 0

[linux-merge]linux integration; annotated tag, v6.5-rc2, created. v6.5-rc2
by postmaster＠open-mesh.org 17 Jul '23

17 Jul '23

The annotated tag, v6.5-rc2 has been created at 79e382d64083468c3b95bbf36dfe8a4feb4f18ff (tag) tagging fdf0eaf11452d72945af31804e2a1048ee1b574c (commit) replaces v6.5-rc1 tagged by Linus Torvalds on Sun Jul 16 15:10:37 2023 -0700 - Shortlog ------------------------------------------------------------ Linux 6.5-rc2 -----BEGIN PGP SIGNATURE----- iQFSBAABCAA8FiEEq68RxlopcLEwq+PEeb4+QwBBGIYFAmS0at0eHHRvcnZhbGRz QGxpbnV4LWZvdW5kYXRpb24ub3JnAAoJEHm+PkMAQRiG6m8H/RZCd2DWeM94CgK5 DIxNLxu90PrEcrOnqeHFJtQoSiUQTHeseh9E4BH0JdPDxtlU89VwYRAevseWiVkp JyyJPB40UR4i2DO0P1+oWBBsGEG+bo8lZ1M+uxU5k6lgC0fAi96/O48mwwmI0Mtm P6BkWd3IkSXc7l4AGIrKa5P+pYEnm0Z6YAZILfdMVBcLXZWv1OAwEEkZNdUuhE3d 5DxlQ8MLzlQIbe+LasiwdL9r606acFaJG9Hewl9x5DBlsObZ3d2rX4vEt1NEVh89 shV29xm2AjCpLh4kstJFdTDCkDw/4H7TcFB/NMxXyzEXp3Bx8YXq+mjVd2mpq1FI hHtCsOA= =KiaU -----END PGP SIGNATURE----- ----------------------------------------------------------------------- -- linux integration

1 0

[batman-adv] main,main: Merge branch 'stable' (f779cdaf)
by postmaster＠open-mesh.org 11 Jul '23

11 Jul '23

Repository : ssh://git@diktynna/batman-adv On branches: main,main >--------------------------------------------------------------- commit f779cdaf7782ee765dbddd31f6d9a89abf0c52f9 Merge: 8e52ef4c 8924adbd Author: Sven Eckelmann <sven(a)narfation.org> Date: Tue Jul 11 11:49:55 2023 +0200 Merge branch 'stable' >--------------------------------------------------------------- f779cdaf7782ee765dbddd31f6d9a89abf0c52f9 compat-include/linux/kstrtox.h | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-)

1 0

[batman-adv] main,stable,main,stable: batman-adv: compat: Use native kstrtox.h for 5.10.185 (8924adbd)
by postmaster＠open-mesh.org 11 Jul '23

11 Jul '23

Repository : ssh://git@diktynna/batman-adv On branches: main,stable,main,stable >--------------------------------------------------------------- commit 8924adbdf993cd0521f9d0024b43e3b23af5114f Author: Sven Eckelmann <sven(a)narfation.org> Date: Tue Jul 11 11:46:30 2023 +0200 batman-adv: compat: Use native kstrtox.h for 5.10.185 Upstream stable commit 6e2e551e39fd ("kernel.h: split out kstrtox() and simple_strtox() to a separate header") backported the support for linux/kstrtox.h. Unfortunately, the compat support via linux/kernel.h was dropped and thus references to kstrtou64 caused build errors batman-adv/net/batman-adv/gateway_common.c: In function ‘batadv_parse_throughput’: batman-adv/net/batman-adv/gateway_common.c:55:15: error: implicit declaration of function ‘kstrtou64’ [-Werror=implicit-function-declaration] 55 | ret = kstrtou64(buff, 10, &lthroughput); | ^~~~~~~~~ Signed-off-by: Sven Eckelmann <sven(a)narfation.org> >--------------------------------------------------------------- 8924adbdf993cd0521f9d0024b43e3b23af5114f compat-include/linux/kstrtox.h | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/compat-include/linux/kstrtox.h b/compat-include/linux/kstrtox.h index cd152e4b..3b6bae2f 100644 --- a/compat-include/linux/kstrtox.h +++ b/compat-include/linux/kstrtox.h @@ -11,7 +11,8 @@ #define _NET_BATMAN_ADV_COMPAT_LINUX_KSTRTOX_H_ #include <linux/version.h> -#if LINUX_VERSION_IS_GEQ(5, 14, 0) +#if (LINUX_VERSION_IS_GEQ(5, 10, 185) && LINUX_VERSION_IS_LESS(5, 11, 0)) || \ + LINUX_VERSION_IS_GEQ(5, 14, 0) #include_next <linux/kstrtox.h> #else #include <linux/kernel.h>

1 0

[linux-merge]linux integration; annotated tag, v4.19.288, created. v4.19.288
by postmaster＠open-mesh.org 10 Jul '23

10 Jul '23

The annotated tag, v4.19.288 has been created at c8b7de5060299a91ff58d76ab21d2620a441c7e5 (tag) tagging 94bffc1044d871e2ec89b2621e9a384355832988 (commit) replaces v4.19.282 tagged by Greg Kroah-Hartman on Wed Jun 28 10:17:46 2023 +0200 - Shortlog ------------------------------------------------------------ This is the 4.19.288 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmSb7KoACgkQONu9yGCS aT6s8A//U4Q/1LMrkXiew99gV76v0LlFNuXEVWkd0VqEdeK+UG86gLcfjZUaHmtX Jx0nAZ7GWvn90ZaCNgN6PrKQ8LSeABOCGcpdx8cvLxoSGoB0ipjVcwddocAjOIzp ly/+1HhC0UadE9NZ7vyaCiUZ3U+0Sj22J85JZz+A4y1FwpYbXHJclGmmmmUg4MCU NwBUiu+2ad8D7vR7a0yiTlsdxBAwU2LoEdysteBv8vDHB+BXjNXC0jpBhXsvaaBd VN0bav9XWvKHN73CMcWW8I8ABSirJRQhdGC43BMNjE2+I3KIHjOzgqALOvfd9eSJ Jl9ztoqO+tI4wee0ZIQbobJ57vgqik+oX4eTGxaAfxD1BgqtuNVaDDw+3Wg3pgpP mRdbbfUixFR4tP0VsuLN3b6Ff5q4nhq8h6ZJ0I4tiSRL6K9CNimBKhTh1ECexDPr t+se4Zr58KkgrZCM/ERrwn5NvRcjF5PuBA1i3u1DWecHptZ6FNAwHSKMPFM7CoCH FTyNikDe6FCtzA2gHkj85bC5W0QahU+SD65OIv7Ziz6SOLKu2HjLYxQbcW/1uCW0 Nikd5nADhOpDAxLvb7Cjt7Gh1GxWOIVnZaAFXh+KCVT9p/Xt8JimXvRTdSN5PGkp Mhg525BLTdXHQPr32IHY3gbeRbiAMCBK/pygPQ2DBKRVS53jkyM= =RsRd -----END PGP SIGNATURE----- Vladislav Efanov (1): batman-adv: Broken sync while rescheduling delayed work ----------------------------------------------------------------------- -- linux integration

1 0

[linux-merge]linux integration; annotated tag, v5.4.249, created. v5.4.249
by postmaster＠open-mesh.org 10 Jul '23

10 Jul '23

The annotated tag, v5.4.249 has been created at 74fdd48a2b6cc422df77f82f6ef0676ef189420e (tag) tagging b30db4f7e45f3c17cca2ba5be6f22762837a6e34 (commit) replaces v5.4.242 tagged by Greg Kroah-Hartman on Wed Jun 28 10:20:46 2023 +0200 - Shortlog ------------------------------------------------------------ This is the 5.4.249 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmSb7V4ACgkQONu9yGCS aT5vLxAA0yhg7h210wyMLrPNgQHrIItxkvcosoAG04WziImnvTT84XYpvthKlQrZ jzLGwdrH8ggdZIq+jPblmGvfvpGuM7MjKw1F8tgmviMnMyfKziGO/kIEzkNPaHSt sRFuGniXx2Q/m2IVblhC8pqJG6SRgkBbNgg3by7SpTRSEHBjpxaOVxvGC53Bdlkb ep90ox3iVbA4Q45rGCn5UfJM22wEnUYbzRv04085fzWaPDEZyHi5S6a3rHepVbrq 7ElDQgUgHKlLm7rd1ngB8Ac+EdfavVcPok789pbEmQwf6jsAetl43yPUSEE6xFXb 5FZAA7uUUa+E7P+140+iWBCZwQX9g+WglEkOxJV8gOMtWoiFZjpPcJxyWnvz/7ch XFz88WW/Ub4+bpg62TJ2F3dboeF0x1rN5kB8/ylb+Gf9vACT2gPLDbFaeG24DZEr s1hdsRx1Q3m8ffOYbsuTTn3bfGv8TfycV4Cwy+v+QPwJF/WPdMUnIDRY7VgWJ6fO scRdhkgMer9MLDrcSwxgS3tyn6JObQMp5A40H1Yb6ZVwN+q2BRC/B4Gqi6BmUNKr uU0BRMeyExyyQfKYCgvcf0M23qUf5L4PDpk1MX38pU+AHm8rPHlE36/pNFG4PG0g p6vBTlKzYeHKh12VAdPJjiWICloaz2ixf3K85xJ+vH56jXfjbSY= =3Pqk -----END PGP SIGNATURE----- Vladislav Efanov (1): batman-adv: Broken sync while rescheduling delayed work ----------------------------------------------------------------------- -- linux integration

1 0

[linux-merge]linux integration; annotated tag, v5.10.186, created. v5.10.186
by postmaster＠open-mesh.org 10 Jul '23

10 Jul '23

The annotated tag, v5.10.186 has been created at 19316824172a42404c57b898d3643303a72e39dc (tag) tagging 381518b4a9165cd793599c1668c82079fcbcbe1f (commit) replaces v5.10.179 tagged by Greg Kroah-Hartman on Wed Jun 28 10:28:43 2023 +0200 - Shortlog ------------------------------------------------------------ This is the 5.10.186 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmSb7zsACgkQONu9yGCS aT4owg/8CVQEVFLuUleIxBOTav2SJI9gOr0Iv1T9ULQUyHhTQBKqpDzG4TQRosqQ NuXlDCog5PIHDnzBbt9PTKvy0biORSJ2miKMvNkVdeNfEUcyHlLt2HrwQkJPSXvN bNDDKGbNjnOfC5eojpNd7T0/SD199ykkkDLg9gRm4bLtYIL4Q4pf+d5s5raVv3TS lBXLNg6Cp9vVfMm1qVyQ+MaRsIHrOSf9J9J1nYRIISM5nBdZmEiCvZBUwwb1BvsF 0FUv583Cgjf/fbQp8cI0VWZhpNJM1+16MvrBQtiePJ+Jm77WxJlqtDvdKSN0QPhe rLS5mZAfxKN3Yg2YgTyXpmLKjPxdPz5ufYg0F49EV35GBwmwhrs7dNhB1UTsWnhL jJJCCkgORIcE2EVyZtnXywBS6ACUldis3FoIiuuuav/wODBs2XD5s0xAYSzaAHSp fePjOgvzNVoLVA0FQKZf39oFalNatpYJLyZLL9WauZ/OAulPIr3gLIPrTi6nQc2v nNObn0GouIBZSeBWfRW2znKh7KYs10dD0YFtiVUV7na3L/jVXXIwK0b53Ajy1LVE 4WYa9EEtchrohE54jCXIuDQPY/dJp/gGKACMy2sCYOw2dJrqh0qPokQ6Xgi1tpMl hwDEnGpjF9Tko47AvJs50d8O1uZEUL+6LJCQ34LP9FfVs3cKhJ0= =PJ0K -----END PGP SIGNATURE----- Sven Eckelmann (1): batman-adv: Switch to kstrtox.h for kstrtou64 Vladislav Efanov (1): batman-adv: Broken sync while rescheduling delayed work ----------------------------------------------------------------------- -- linux integration

1 0

[linux-merge]linux integration; annotated tag, v5.15.120, created. v5.15.120
by postmaster＠open-mesh.org 10 Jul '23

10 Jul '23

The annotated tag, v5.15.120 has been created at 2ba77c00b239ade1cf4e76ece12032021ab6e9fb (tag) tagging d54cfc420586425d418a53871290cc4a59d33501 (commit) replaces v5.15.111 tagged by Greg Kroah-Hartman on Wed Jul 5 18:25:16 2023 +0100 - Shortlog ------------------------------------------------------------ This is the 5.15.120 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmSlp3wACgkQONu9yGCS aT4HzRAAzu6rQcCd28wOwWwn2wziG3UjMpDc9YCYxAGI7LOAry8JvdNSP12PSgAE MzB8VGAEwzNVjmbt9wbMtEJDt+cgw6TS1+ObQM21Yc4dVXjZOOHhN/idiKKlS9H+ MVKg37Nln566G/HdBeJA0ORcwTDxLuhvdVRyGzbEPJBl4PSnm3wz4/oo2y+j9v1i t/w6nk6Sy5Ku3IZkIZss/dGzCh/R5RgW33XKsJ4dryl2rvlohvMQL/2T1ztys6++ MGw2yboU5lt1aHY3GeR4X4OHXQ3Ii8NbH2ouWDP+Le97br2CjDwlkRwaOOffayyh bYkBRGj8ovCksDTFnNiWx2KRIUO4htZ9PykqiKpAvv1Ali8DKsVezsvYAObw4hpu iQtwAtG4bGcM3gm/qMafaR97Icz8BgYFCVcZx9WdA1mKmTHobSvqVBeFknmMgxed YgnrmsUE2vBa2tVptoWb0fezhQYPd9DBZsMoodec97hYBE2miRCJxcsvyJ4rThh7 h/MI13eJGVKiIEBGCIevo1T0vPu8ciSTCTc4lWJ3fvD6GAbBcaTdYdN2FZiIR/9g AGV115873anDjjMX/FcD65urMIZOU69GR5iPA/XMOyfAzF8qr33reZO6rD6d3VnN K7PwgTuUAWXDu5hGcwO47cRAbyNyeiOgv8ssjzj6JRFY9mIi9HE= =eK94 -----END PGP SIGNATURE----- Vladislav Efanov (1): batman-adv: Broken sync while rescheduling delayed work ----------------------------------------------------------------------- -- linux integration

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

commits July 2023