1645 Commits

Author SHA1 Message Date
Andrey Konovalov
f9a8d567eb pkg/report: add corrupted report detection
This change makes pkg/report try to detect corrupted reports by
using some heuristics.
2017-11-13 17:18:16 +03:00
Dmitry Vyukov
e0a2b1953b vm: merge "not executing programs" into "no output"
Frequently it's the same condition.
In one case there is just a stray error message on console
that turns the crash into "not executing programs".
While in another case there is no stray message,
and then it's detected as "no output".
2017-11-08 18:01:43 +01:00
Dmitry Vyukov
3b7ad24d6c syz-manager/mgrconfig: add another OOM suppression
If sshd was killed, we will get "lost connection".
2017-11-08 18:01:43 +01:00
Andrey Konovalov
dd1609f876 executor: proceed even if /dev/net/tun is not available
For some racy bugs syzkaller can generate a C reproducer with tun
enabled, when it's not actuallly required to trigger the bug.
Some kernel developers (that don't have CONFIG_TUN=y on their setups)
complain about such C repros.
When tun is not available, instead of exiting, print a message that tun
initialization failed and proceed.
2017-11-08 17:43:40 +01:00
Tobias Klauser
784eb9c23c sys/freebsd: add POLLINIGNEOF 2017-11-08 19:30:10 +03:00
Dmitry Vyukov
9547ae3a85 dashboard/app: clarify that email commands must be in email body
We've got a reply in subject.
2017-11-08 14:16:36 +01:00
Dmitry Vyukov
bc4a24220e dashboard/app: explicitly say that we don't have a reproducer 2017-11-08 14:16:36 +01:00
Dmitry Vyukov
6c412fa20c pkg/git: add another commit prefix 2017-11-08 14:16:36 +01:00
Andrey Konovalov
699e0a68ad
Update found_bugs_usb.md 2017-11-08 00:03:26 +01:00
Andrey Konovalov
a2c64463a2 execprog: correctly handle fault injections
syz-execprog doesn't utilize info about fault injections from a prog log.
Since syz-execprog is used by the repro package to reproduce crashes,
crashes caused by fault injections might not reproduce.
2017-11-07 16:17:18 +01:00
Andrey Konovalov
ef57962634
Update contributing.md 2017-11-07 14:23:57 +01:00
Andrey Konovalov
102fd70169
Update found_bugs_usb.md 2017-11-07 14:05:28 +01:00
Andrey Konovalov
4baddb8d39
Update found_bugs_usb.md 2017-11-07 14:01:33 +01:00
Andrey Konovalov
262ab53d85
Update found_bugs_usb.md 2017-11-07 13:59:04 +01:00
Andrey Konovalov
085e9f8d56
Update found_bugs_usb.md 2017-11-07 13:51:40 +01:00
Andrey Konovalov
d49979f75f
Update found_bugs_usb.md 2017-11-07 13:34:40 +01:00
Dmitry Vyukov
8f3e774b76 syz-ci: improve commit matching
1. Fetch last 200K commits instead of commits for past year.
For merged commits both author date and commit date can be
arbitrary long in past (e.g. we got a commit dated by 2014).

2. Strip some commit prefixes from commits.
We have some trees where backports are prefixed with "BACKPORT:".
Previously we could no match such commits.
2017-11-07 13:31:00 +01:00
Dmitry Vyukov
c1c91039f7 vm/gce: fix error formatting
This is detected with newer Go toolchain:

vm/gce/gce.go:376: Errorf format %v reads arg #1, but call has only 0 args
vm/gce/gce.go:381: Errorf format %v reads arg #1, but call has only 0 args
2017-11-07 13:25:27 +01:00
Dmitry Vyukov
7b05d23e43 dashboard/app: show fixing commit title as hint 2017-11-07 10:39:39 +01:00
Dmitry Vyukov
8bac040e2a docs: update path to syz-execprog binary 2017-11-07 10:39:39 +01:00
Eric Biggers
38977f0e6b sys/linux: add definition for LOOP_SET_BLOCK_SIZE
The v4.14 kernel will support a new loop ioctl, LOOP_SET_BLOCK_SIZE.
2017-11-07 12:26:11 +03:00
Eric Biggers
a6b071286e sys/linux: fix wrong ioctl numbers in loop device definitions
Fix a couple apparent copy-and-paste errors:

    - ioctl$LOOP_CHANGE_FD should use LOOP_CHANGE_FD
    - ioctl$LOOP_CTL_REMOVE should use LOOP_CTL_REMOVE
2017-11-07 12:26:11 +03:00
Eric Biggers
3f85f7fc46 syz-extract: fix printf conditional in template
commit 3520854be0e7 ("syz-extract: select declaring printf or not")
broke 'make extract' because it introduced invalid syntax in a text
template.  Fix it.
2017-11-07 11:21:47 +03:00
Andrey Konovalov
4340937250
Update found_bugs_usb.md 2017-11-06 16:23:50 +01:00
Dmitry Vyukov
6db82ca081 dashboard/app: show when bugs are fixed and where 2017-11-06 15:01:28 +01:00
Dmitry Vyukov
a2961665fd dashboard/app: pass namespace in bug reports
Namespace can be used for some customization
in external reporter.
2017-11-06 15:01:28 +01:00
Dmitry Vyukov
d5a1adcc06 tools/syz-execprog: allow to override target OS
This is currently useful for akaros, which is tested remotely.
2017-11-06 15:01:28 +01:00
Andrey Konovalov
0b00174908
Update found_bugs_usb.md 2017-11-06 14:30:51 +01:00
Andrey Konovalov
6972c447af
Update found_bugs_usb.md 2017-11-06 13:20:02 +01:00
zoulasc
3520854be0 syz-extract: select declaring printf or not
Kernels are standalone implementations and can have their own
implementations of functions that have different prototypes than
the standard ones. In the NetBSD case the kernel printf returns
void, and it is declared in <sys/systm.h> so avoid re-declaring it.
Select if we are going to declare printf or not depending on the OS.
2017-11-06 11:27:45 +03:00
zoulasc
7afa56efb4 syz-extract: Add missing symlink for NetBSD and refactor symlink code. 2017-11-06 11:27:45 +03:00
zoulasc
0460a8dda0 csource: Fix sed(1) invocation
There is no need to specify '-' as the filename for sed(1):
- The default behavior is to read stdin
- It was not done in all places
- It breaks on NetBSD sed(1) (although I am tempted to fix it now :-)
  and it does not work
2017-11-06 11:27:45 +03:00
Andrey Konovalov
ff12ae316d
Update found_bugs_usb.md 2017-11-04 21:53:06 +01:00
Andrey Konovalov
c78b455b14
Update found_bugs_usb.md 2017-11-04 18:37:14 +01:00
Andrey Konovalov
7c537a4b3d
Update found_bugs_usb.md 2017-11-03 15:48:10 +01:00
Dmitry Vyukov
e930d6f675
Update contributing.md 2017-11-03 13:16:21 +03:00
Eric Biggers
7cff33f196 sys/linux: add definition for keyctl_restrict_keyring()
Add a definition for keyctl_restrict_keyring(), which was added in the
v4.12 kernel.
2017-11-03 12:33:25 +03:00
Eric Biggers
d53e548027 sys/linux: add definition for keyctl_dh_compute()
Add a definition for keyctl_dh_compute(), which was added in the v4.7
kernel, then in the v4.12 kernel extended to take in an optional
'keyctl_kdf_params' argument.  (Requires CONFIG_KEY_DH_OPERATIONS=y.)
2017-11-03 12:33:25 +03:00
Eric Biggers
494a18d9f8 sys/linux: use resource subtypes for "user" and "keyring" keys
Many functions in the keys API take in an ID parameter that is expected
to refer to a keyring, not to any key.  Therefore, define a resource
subtype 'keyring' which can be created by add_key("keyring", ...) or by
using one of the special keyring IDs.

Also define a resource subtype 'user_key', since we'll be adding a
definition for KEYCTL_DH_COMPUTE which takes in a struct containing
"user" key IDs.
2017-11-03 12:33:25 +03:00
Eric Biggers
2fb815f286 sys/linux: define all the key types
Add to key.txt all key types that currently might be present in the
kernel.  It was missing a few important ones such as "asymmetric", which
has a significant attack surface since the payloads are run through an
ASN.1 decoder.
2017-11-03 12:33:25 +03:00
Andrey Konovalov
02b8363d92
Update found_bugs_usb.md 2017-11-02 21:57:17 +01:00
Andrey Konovalov
d13dbe4be1
Update found_bugs_usb.md 2017-11-02 21:03:35 +01:00
Andrey Konovalov
66e5c44375
Update found_bugs_usb.md 2017-11-02 17:28:12 +01:00
Andrey Konovalov
9814901086
Update found_bugs_usb.md 2017-11-02 17:11:13 +01:00
Andrey Konovalov
d8cc0b2c59
Update found_bugs_usb.md 2017-11-02 16:21:16 +01:00
Andrey Konovalov
d255aac955
Update found_bugs_usb.md 2017-11-02 16:20:37 +01:00
Andrey Konovalov
e9056a1546
Update external_fuzzing_network.md 2017-11-02 16:16:54 +01:00
Andrey Konovalov
2494cc50f5
Update found_bugs_usb.md 2017-11-02 16:10:52 +01:00
Andrey Konovalov
ebfe42c394
Update found_bugs.md 2017-11-02 16:06:19 +01:00
Andrey Konovalov
3c214efbf4
Update found_bugs_usb.md 2017-11-02 15:59:48 +01:00