linux-kernel - Re: [PATCH] cache_k8_northbridges() overflows beyond allocation (Was: 2.6.21-rc5-mm4 (SLUB))

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.64.0704131105570.20347@schroedinger.engr.sgi.com>
Date:	Fri, 13 Apr 2007 11:07:52 -0700 (PDT)
From:	Christoph Lameter <clameter@....com>
To:	Badari Pulavarty <pbadari@...il.com>
cc:	ak@...e.de, Andrew Morton <akpm@...ux-foundation.org>,
	lkml <linux-kernel@...r.kernel.org>
Subject: Re: [PATCH] cache_k8_northbridges() overflows beyond allocation
 (Was: 2.6.21-rc5-mm4 (SLUB))

On Fri, 13 Apr 2007, Badari Pulavarty wrote:

> On Wed, 2007-04-04 at 11:04 -0700, Christoph Lameter wrote:
> > On Wed, 4 Apr 2007, Badari Pulavarty wrote:
> ...
> > 
> > > *** SLUB: Freepointer corrupt in kmalloc-16@...fff810173f172a0 Slab
> > > 0xffff81017f9f8b80
> > >     offset=672 flags=0x2000000000000c7 inuse=42
> > > freelist=0xffff810173f172a0
> > >   Bytes b4 0xffff810173f17290:  a0 72 f1 73 00 00 00 00 00 00 00 00 00
> > > 00 00 00 .r\uffffs............
> > >     Object 0xffff810173f172a0:  00 00 00 00 01 81 ff ff 00 00 00 00 00
> > > 00 00 00 ......\uffff\uffff........
> > > FreePointer 0xffff810173f172a0 -> 0xffff810100000000
> > 
> 
> Found it !! After a painful capture of all the kmalloc-16 slab
> allocations (400+) so far and auditing some of them, found the
> culprit - who writes beyond its allocation, causing the slab
> corruption.

Thanks. I am sorry that this was not easier for you. But as a result I 
thoroughly tested the slab corruption detection in SLUB yesterday found 
various issues and submitted  patches to Andrew that will make this 
really work well. Too late for you though.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/