netdev - Re: oops / null deref in __inet6_check_established(), kernel 2.6.29-rc6

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Tue, 24 Feb 2009 18:35:54 -0500
From:	Chuck Ebbert <cebbert@...hat.com>
To:	David Miller <davem@...emloft.net>
Cc:	netdev@...r.kernel.org
Subject: Re: oops / null deref in __inet6_check_established(), kernel
 2.6.29-rc6

On Tue, 24 Feb 2009 15:27:04 -0800 (PST)
David Miller <davem@...emloft.net> wrote:

> From: Chuck Ebbert <cebbert@...hat.com>
> Date: Tue, 24 Feb 2009 18:21:47 -0500
> 
> > (This doesn't happen on 2.6.27/28)
> > 
> > tw is NULL at net/ipv6/inet6_hashtables.c:261:
> > 
> > 	if (twp != NULL) {
> > 		*twp = tw;
> > ===>		NET_INC_STATS_BH(twsk_net(tw), LINUX_MIB_TIMEWAITRECYCLED);
> > 	} else if (tw != NULL) {
> > 
> > I can reproduce this on real hardware on x86_64 too...
> 
> How? :-)

Oops, forgot to add the bug URL:

https://bugzilla.redhat.com/show_bug.cgi?id=486889

Steps to Reproduce:
1. Get minirpc 0.3.2 [http://minirpc.cs.cmu.edu/download/minirpc-0.3.2.tar.gz]
2. Run ./configure ; make ; make check
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html