syscalls/keyctl07: new test for oops when reading negative key

PATCH Superseded Eric Biggers 1 participant 1 message Oct 16, 2017 Keys/keyrings

lore

Share & tools

lore

Eric Biggers

author

2017-10-16 19:47 UTC #0 lore raw

PATCH v3 1/1 syscalls/keyctl07: new test for oops when reading negative key

From: Eric Biggers <[email protected]>

Add a test for a bug which caused the kernel to dereference a bogus pointer when using KEYCTL_READ to read from a negative key.

Signed-off-by Eric Biggers <[email protected]>

---
 runtest/cve                                 |   1 +
 runtest/syscalls                            |   1 +
 testcases/kernel/syscalls/.gitignore        |   1 +
 testcases/kernel/syscalls/keyctl/keyctl07.c | 109 ++++++++++++++++++++++++++++
 4 files changed, 112 insertions(+)
 create mode 100644 testcases/kernel/syscalls/keyctl/keyctl07.c

runtest/cve +1 -0

index d182e592a..b8e038112 100644
@@ -17,5 +17,6 @@ cve-2017-2671 cve-2017-2671
 cve-2017-5669 cve-2017-5669
 cve-2017-6951 cve-2017-6951
 cve-2017-7472 keyctl04
+cve-2017-12192 keyctl07
 cve-2017-15274 add_key02
 cve-2017-1000364 stack_clash

runtest/syscalls +1 -0

index 49ae48621..e345325a2 100644
@@ -504,6 +504,7 @@ keyctl03 keyctl03
 keyctl04 keyctl04
 keyctl05 keyctl05
 keyctl06 keyctl06
+keyctl07 keyctl07
 
 kcmp01 kcmp01
 kcmp02 kcmp02

testcases/kernel/syscalls/.gitignore +1 -0

index 76bae9e4a..2a770a998 100644
@@ -465,6 +465,7 @@
 /keyctl/keyctl04
 /keyctl/keyctl05
 /keyctl/keyctl06
+/keyctl/keyctl07
 /kcmp/kcmp01
 /kcmp/kcmp02
 /kcmp/kcmp03

testcases/kernel/syscalls/keyctl/keyctl07.c new file +109 -0

109 lines not on this page · raw message

Signature · 1 line

2.15.0.rc0.271.g36b669edcc-goog