linux-ext4 - Re: BUG:OOPS

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:	Wed, 7 Aug 2013 12:56:31 +0200
From:	Jan Kara <jack@...e.cz>
To:	majianpeng <majianpeng@...il.com>
Cc:	linux-ext4 <linux-ext4@...r.kernel.org>
Subject: Re: BUG:OOPS

On Thu 01-08-13 11:10:57, majianpeng wrote:
> The current git: commit 06693f305e60202d2795a10bee7fb7da23bc2acc.
> I don't know how to reproduce this.
  Thanks for report! I'd need full disassebly of jbd2_journal_file_inode()
function but guessing from decoding instructions around the place where we
oopsed I think we passed NULL jinode into jbd2_journal_file_inode() -
likely this was introduced by 0713ed0cde76438d05849f1537d3aab46e099475.

Hum... jinode gets attached to ext4_inode_info in ext4_file_open(). But
here we entered that path via sys_truncate() so ext4_file_open() didn't get
called. OK, so we need to attach jinode to ext4_inode_info somewhere in
truncate and punch hole paths. I'll prepare a patch for that.

								Honza
 
> [  541.177396] BUG: unable to handle kernel NULL pointer dereference at           (null)
> [  541.177442] IP: [<ffffffff8122e793>] jbd2_journal_file_inode+0x53/0x140
> [  541.177476] PGD b7bed067 PUD 9fefd067 PMD 0 
> [  541.177505] Oops: 0000 [#1] SMP 
> [  541.177529] Modules linked in: fuse e1000e
> [  541.177562] CPU: 1 PID: 7145 Comm: ceph-osd Tainted: G        W    3.11.0-rc3+ #29
> [  541.177595] Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./To be filled by O.E.M., BIOS 080015  11/09/2011
> [  541.177638] task: ffff88009fee4600 ti: ffff88009d9de000 task.ti: ffff88009d9de000
> [  541.177667] RIP: 0010:[<ffffffff8122e793>]  [<ffffffff8122e793>] jbd2_journal_file_inode+0x53/0x140
> [  541.177705] RSP: 0018:ffff88009d9dfcc0  EFLAGS: 00010246
> [  541.177728] RAX: ffff8800b78da000 RBX: ffff880094ddfcc0 RCX: 0000000000004040
> [  541.177756] RDX: ffff8800bd429cc0 RSI: 0000000000000000 RDI: ffff8800b670cc00
> [  541.177783] RBP: ffff88009d9dfce0 R08: 0000000000000000 R09: 0000000000000000
> [  541.177810] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
> [  541.177838] R13: ffff8800b670cc00 R14: ffff880072022208 R15: 0000000000000a4a
> [  541.177866] FS:  00007f3f97696700(0000) GS:ffff8800bd400000(0000) knlGS:0000000000000000
> [  541.177903] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> [  541.177927] CR2: 0000000000000000 CR3: 000000009fe1d000 CR4: 00000000000407e0
> [  541.177954] Stack:
> [  541.177965]  0000000000000a4a ffff880087916a60 ffffea0001adb080 ffff880072022208
> [  541.178005]  ffff88009d9dfd40 ffffffff811e95eb 0000000000001000 0000000000001000
> [  541.178005]  00000000000005b6 ffff8800b670cc00 ffff880072022208 ffff880087916a60
> [  541.178005] Call Trace:
> [  541.178005]  [<ffffffff811e95eb>] ext4_block_zero_page_range+0x3bb/0x3e0
> [  541.178005]  [<ffffffff811e972b>] ext4_block_truncate_page+0x2b/0x30
> [  541.178141]  [<ffffffff811ea363>] ext4_truncate+0x313/0x3a0
> [  541.178141]  [<ffffffff8112542d>] ? truncate_pagecache+0x5d/0x70
> [  541.178141]  [<ffffffff811eaebd>] ext4_setattr+0x3fd/0x740
> [  541.178141]  [<ffffffff811836ab>] notify_change+0x1db/0x390
> [  541.178141]  [<ffffffff81165550>] do_truncate+0x60/0xa0
> [  541.178141]  [<ffffffff81165706>] vfs_truncate+0x176/0x1a0
> [  541.178141]  [<ffffffff8116578c>] do_sys_truncate+0x5c/0xa0
> [  541.178141]  [<ffffffff8116594e>] SyS_truncate+0xe/0x10
> [  541.178141]  [<ffffffff816e6254>] tracesys+0xdd/0xe2
> [  541.178141] Code: db 0f 84 f3 00 00 00 41 f6 45 1c 08 0f 85 ae 00 00 00 49 8b 45 00 48 85 c0 0f 84 a1 00 00 00 48 8b 00 f6 00 02 0f 85 95 00 00 00 <49> 39 1c 24 4c 8b 2b 0f 84 90 00 00 00 49 39 5c 24 08 0f 84 85 
> [  541.178141] RIP  [<ffffffff8122e793>] jbd2_journal_file_inode+0x53/0x140
> [  541.178141]  RSP <ffff88009d9dfcc0>
> [  541.178141] CR2: 0000000000000000
> [  541.178738] ---[ end trace 951cd63ac5df02d2 ]---
> 
> 
> Thanks!
> Jianpeng MaN?Р骒r??y????b?X?肚?v?^?)藓{.n?+?伐?{?{.x?{ay?.?????,j.??f＂?h???z?.?wア?.⒎?j:+v???w?j?m????.??赙zZ+?????茛j"??!
-- 
Jan Kara <jack@...e.cz>
SUSE Labs, CR
--
To unsubscribe from this list: send the line "unsubscribe linux-ext4" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html