[LTP] [PATCH v2] cve: reproducer for cve-2026-64600

Martin Doucha mdoucha@suse.cz
Thu Jul 30 16:27:05 CEST 2026


Hi,
could this race be reproduced using the fuzzy sync library? Fuzzy sync 
tests are usually faster and more reliable than the original "throw many 
threads at it" proof of concept programs.

One more issue below.

On 7/24/26 14:54, Andrea Cervesato wrote:
> +#include <pwd.h>
> +
> +#include "tst_test.h"
> +#include "tst_safe_pthread.h"
> +#include "tst_safe_prw.h"
> +#include "lapi/ficlone.h"
> +
> +#define MNTPOINT	"mnt"
> +#define WORKDIR		MNTPOINT "/work"
> +#define TARGET		WORKDIR "/target"
> +#define CLONE		WORKDIR "/clone"
> +#define SCRATCH_FMT	WORKDIR "/scratch%d"
> +
> +#define BLKSIZE		4096
> +#define NWRITERS	32
> +#define NPRESSURE	16
> +#define MAX_ROUNDS	5000
> +
> + <snip>
> +
> +static void setup(void)
> +{
> +	int probe_fd, probe_dio_fd;
> +
> +	tbuf = SAFE_MEMALIGN(BLKSIZE, BLKSIZE);
> +	wbuf = SAFE_MEMALIGN(BLKSIZE, BLKSIZE);
> +	rbuf = SAFE_MEMALIGN(BLKSIZE, BLKSIZE);

Aligning to fixed 4K blocksize will cause errors on PPC64 and 64K ARM. 
Please detect the correct blocksize with stat() or statvfs() instead.

-- 
Martin Doucha   mdoucha@suse.cz
SW Quality Engineer
SUSE LINUX, s.r.o.
CORSO IIa
Krizikova 148/34
186 00 Prague 8
Czech Republic


More information about the ltp mailing list