[Bug 210503] New: KASAN: no redzones for page allocations

[bugzill...@bugzilla.kernel.org]

https://bugzilla.kernel.org/show_bug.cgi?id=210503

Bug ID: 210503
Summary: KASAN: no redzones for page allocations
Product: Memory Management
Version: 2.5
Kernel Version: upstream
Hardware: All
OS: Linux
Tree: Mainline
Status: NEW
Severity: normal
Priority: P1
Component: Sanitizers
Assignee: mm_san...@kernel-bugs.kernel.org
Reporter: andre...@gmail.com
CC: kasa...@googlegroups.com
Regression: No

Page allocations have no redzones, therefore detecting even linear
out-of-bounds bugs on those with the generic KASAN is impossible, unless the
accessed memory is freed.

Related issue: https://bugzilla.kernel.org/show_bug.cgi?id=203967

--
You are receiving this mail because:
You are on the CC list for the bug.

[bugzill...@bugzilla.kernel.org]

https://bugzilla.kernel.org/show_bug.cgi?id=210503

Andrey Konovalov (andre...@gmail.com) changed:

What |Removed |Added
----------------------------------------------------------------------------
Summary|KASAN: no redzones for page |KASAN: add redzones for
|allocations |page allocations

--
You may reply to this email to add a comment.

[bugzill...@kernel.org]

https://bugzilla.kernel.org/show_bug.cgi?id=210503

--- Comment #1 from Andrey Konovalov (andre...@gmail.com) ---
Case in point of adding page_alloc redzones:
https://cyberstan.co.uk/fuse-readdir-oob/

Easiest implementation would be to use one of each two buddies for the redzone,
but that would result in 2x memory usage.

Possibly, we can use smaller/adaptive redzones, but then gotta make sure that
each two neighboring allocations (no matter the size) have a redzone between
them throughout the allocator's lifetime.

--
You may reply to this email to add a comment.