[LTP] [PATCH] cve: add CVE-2025-38236 test
Petr Vorel
pvorel@suse.cz
Tue Aug 12 13:09:04 CEST 2025
Hi Andrea, Wei,
...
> > 1) I suggest check dummy value after each SAFE_RECV above also
> This is not useful because bug is triggered after the second send()
> > 2) Better send different char for different sent such as A,B,C
+1, very good point. While the original C reproducer from Jann Horn in chromium
[1] used the same char "A", the pythonized reproducer from the kernel fix author
Kuniyuki Iwashima used a different chars. Obviously debugging the fix it was
easier with different chars :).
Kind regards,
Petr
[1] https://project-zero.issues.chromium.org/issues/423023990
[2] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=32ca245464e1
> This can be done
More information about the ltp
mailing list