linux-kernel - Re: BUG in filp_close() (was: Re: 2.6.19-rc1-mm1)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Tue, 10 Oct 2006 15:14:35 -0700
From:	Vadim Lobanov <vlobanov@...akeasy.net>
To:	Dave Kleikamp <shaggy@...tin.ibm.com>
Cc:	linux-kernel@...r.kernel.org
Subject: Re: BUG in filp_close() (was: Re: 2.6.19-rc1-mm1)

On Tuesday 10 October 2006 15:07, Dave Kleikamp wrote:
> Still don't know exactly what's going on here.  In case it helps, this
> is the call to dup2() from strace output:
>
> 1419  open("/dev/null", O_RDWR)         = 7
> 1419  getrlimit(RLIMIT_NOFILE, {rlim_cur=1024, rlim_max=1024}) = 0
> 1419  dup2(7, 524)                      = 524
> 1419  dup2(7, 525 <unfinished ...>

Thanks for the data point.

Hmmm... looks as if the likely sequence of events was:
create embedded fdtable
extend fdtable, allocate external data to handle fd = 524
try to extend fdtable again, crash.

Seems as if alloc_fdtable() or copy_fdtable() are to blame, but the code logic 
seems to be identical. Hmmmm.

-- Vadim Lobanov

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/