google / syzkaller

syzkaller is an unsupervised coverage-guided kernel fuzzer

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

executor: protect kcov mapping with redzones

ramosian-glider opened this issue · comments

As shown in #4531, incorrect assumptions about userspace buffers' sizes may lead the kernel to write outside of the expected bounds of certain mmap() ranges.

When the mapped memory is located next to the kcov mapping, the latter can be easily corrupted. To avoid that, we need to allocate protected redzones around the kcov mapping.