linux-kernel - Re: 2.6.18-mm2 - oops in cache_alloc

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <200610021957.k92Jvk6c004169@turing-police.cc.vt.edu>
Date:	Mon, 02 Oct 2006 15:57:46 -0400
From:	Valdis.Kletnieks@...edu
To:	jt@....hp.com
Cc:	Andrew Morton <akpm@...l.org>, Pavel Roskin <proski@....org>,
	"John W. Linville" <linville@...driver.com>,
	linux-kernel@...r.kernel.org, netdev@...r.kernel.org
Subject: Re: 2.6.18-mm2 - oops in cache_alloc_refill()

On Mon, 02 Oct 2006 10:52:45 PDT, Jean Tourrilhes said:
> On Fri, Sep 29, 2006 at 06:20:08PM -0700, Andrew Morton wrote:
> > On Fri, 29 Sep 2006 20:01:54 -0400
> > > 
> > > % grep ioctl /tmp/foo2 | sort -u | more
> > > ioctl(13, SIOCGIWESSID, 0xbfbcdb9c)     = 0
> > > ioctl(13, SIOCGIWRANGE, 0xbfbcdbdc)     = 0
> > > ioctl(13, SIOCGIWRATE, 0xbfbcdbbc)      = 0
> > 
> > Yes.  The main thing which those WE-21 patches do is to shorten the size of
> > various buffers which are used in wireless ioctls.
> 
> 	Ok, I've found it. Actually, I feel ashamed, as it is a fairly
> classical buffer overflow, we put one extra char in a buffer. Now, I
> don't understand why it did not blow up on my box ;-)
> 	New patch. I think it is right, but I would not mind Pavel to
> have a look at it. On my box it does not make thing worse.
> 	Valdis : would you mind trying if this patch fix the problem
> you are seeing with WE-21 ? If it fixes it, I'll send it to John...

Been up and running with we-21 configured in, and gkrellm doing the monitoring
that gave it indigestion.  It was dying in 1-2 minutes, now been up for 30 mins
with no issues....

Content of type "application/pgp-signature" skipped