linux-kernel - Re: 2.6.21-rc2-mm2

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <20070306192718.999e114d.kamezawa.hiroyu@jp.fujitsu.com>
Date:	Tue, 6 Mar 2007 19:27:18 +0900
From:	KAMEZAWA Hiroyuki <kamezawa.hiroyu@...fujitsu.com>
To:	Andrew Morton <akpm@...ux-foundation.org>
Cc:	linux-kernel@...r.kernel.org
Subject: Re: 2.6.21-rc2-mm2


Following panic ouccurred (always) on ia64/NUMA(with empty node.)

Bug in here.
==
void move_native_irq(int irq)
{
        struct irq_desc *desc = irq_desc + irq;

        if (likely(!(desc->status & IRQ_MOVE_PENDING)))
                return;

        if (unlikely(desc->status & IRQ_DISABLED))
                return;

        desc->chip->mask(irq);  <---------maybe this *mask* is NULL pointer
        move_masked_irq(irq);
        desc->chip->unmask(irq);
}
==

Is "mask"  always valid pointer ?

my .config is attached
==
 Unable to handle kernel NULL pointer dereference (address 0000000000000000)
yum-updatesd[3461]: Oops 11012296146944 [1]
Modules linked in: autofs4 hidp rfcomm l2cap bluetooth sunrpc ipv6 vfat fat dm_mirror dm_mod button parport_pc lp parport sg tg3 e100 shpchp mii usb_storage lpfc scsi_transport_fc mptspi mptscsih mptbase scsi_transport_spi sd_mod scsi_mod ext3 jbd ehci_hcd ohci_hcd uhci_hcd

Pid: 3461, CPU 5, comm:         yum-updatesd
psr : 0000121008022018 ifs : 8000000000000286 ip  : [<a0000001000e02b1>]    Not tainted
ip is at move_native_irq+0x91/0x140
unat: 0000000000000000 pfs : 0000000000000205 rsc : 0000000000000003
rnat: 0000000000000000 bsps: 0000000000000000 pr  : 00000000005a56a9
ldrs: 0000000000000000 ccv : 0000000000000000 fpsr: 0009804c0270033f
csd : 0000000000000000 ssd : 0000000000000000
b0  : a000000100050430 b6  : a00000021b49d0c0 b7  : a000000100050400
f6  : 1003e0000000000000de0 f7  : 1003e0000000000000060
f8  : 1003e0000000000000025 f9  : 1003e00000000000022e0
f10 : 1003e0000000000000060 f11 : 1003e000000000000005d
r1  : a000000100d8d230 r2  : a0000001009f8c30 r3  : 0000000000005580
r8  : a000000100b8e178 r9  : 00000000000000ab r10 : 0000000000000039
r11 : 0000000000200000 r12 : e00001404b6f7e30 r13 : e00001404b6f0000
r14 : 0000000000200000 r15 : a0000001009f8c00 r16 : a000000100b5b160
r17 : 00000000dead4ead r18 : a0000001009f8c4c r19 : 0000000000000000
r20 : a000000100b5b110 r21 : a000000100b5b140 r22 : a000000100b5b110
r23 : 0050200500000874 r24 : a000000100ba98c0 r25 : a00000021b53d768
r26 : e00000018007e030 r27 : a000000100786238 r28 : e000000040004ae0
r29 : a0000001009f8c50 r30 : 0000000000000005 r31 : a0000001009f8c58

Call Trace:
 [<a000000100013e20>] show_stack+0x40/0xa0
                                sp=e00001404b6f79c0 bsp=e00001404b6f1030
 [<a0000001000147e0>] show_regs+0x840/0x880
                                sp=e00001404b6f7b90 bsp=e00001404b6f0fd0
 [<a000000100037de0>] die+0x1c0/0x2a0
                                sp=e00001404b6f7b90 bsp=e00001404b6f0f88
 [<a000000100647630>] ia64_do_page_fault+0x8d0/0xa00
                                sp=e00001404b6f7bb0 bsp=e00001404b6f0f38
 [<a00000010000bf80>] ia64_leave_kernel+0x0/0x270
                                sp=e00001404b6f7c60 bsp=e00001404b6f0f38
 [<a0000001000e02b0>] move_native_irq+0x90/0x140
                                sp=e00001404b6f7e30 bsp=e00001404b6f0f08
 [<a000000100050430>] iosapic_end_level_irq+0x30/0xe0
                                sp=e00001404b6f7e30 bsp=e00001404b6f0ee8
 [<a0000001000dac30>] __do_IRQ+0x390/0x3c0
                                sp=e00001404b6f7e30 bsp=e00001404b6f0ea8
 [<a000000100011620>] ia64_handle_irq+0x1e0/0x2e0
                                sp=e00001404b6f7e30 bsp=e00001404b6f0e78
 [<a00000010000bf80>] ia64_leave_kernel+0x0/0x270
                                sp=e00001404b6f7e30 bsp=e00001404b6f0e78
Kernel panic - not syncing: Aiee, killing interrupt handler!

Download attachment "myconfig" of type "application/octet-stream" (57737 bytes)