linux-kernel - Re: kernel BUG at mm/slub.c:3689!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.64.0706110946430.15910@schroedinger.engr.sgi.com>
Date:	Mon, 11 Jun 2007 09:49:36 -0700 (PDT)
From:	Christoph Lameter <clameter@....com>
To:	Håvard Skinnemoen <hskinnemoen@...il.com>
cc:	Haavard Skinnemoen <hskinnemoen@...el.com>,
	Linux Kernel <linux-kernel@...r.kernel.org>
Subject: Re: kernel BUG at mm/slub.c:3689!

On Mon, 11 Jun 2007, Håvard Skinnemoen wrote:

> On 6/11/07, Christoph Lameter <clameter@....com> wrote:
> > On Mon, 11 Jun 2007, Haavard Skinnemoen wrote:
> > 
> > > While trying to get SLUB debugging to not break DMA on AVR32, I ran
> > > into this:
> > 
> > This is a known bug in 2.6.22-rc2/rc3. Which version are you running?
> 
> 2.6.22-rc4. I did a pull from Linus' tree a few hours ago.

Ahhh... I see its the same phenomenon as before but triggered by
a different cause.

If you set the align to 32 then the first kmalloc slabs of size

8
16
32

are all of the same size which leads to duplicate files in sysfs.

Does this patch fix it?

---
 mm/slub.c |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Index: linux-2.6/mm/slub.c
===================================================================
--- linux-2.6.orig/mm/slub.c	2007-06-11 09:48:04.000000000 -0700
+++ linux-2.6/mm/slub.c	2007-06-11 09:48:17.000000000 -0700
@@ -3579,7 +3579,7 @@ static char *create_unique_id(struct kme
 		*p++ = 'F';
 	if (p != name + 1)
 		*p++ = '-';
-	p += sprintf(p, "%07d", s->size);
+	p += sprintf(p, "%07d", s->objsize);
 	BUG_ON(p > name + ID_STR_LENGTH - 1);
 	return name;
 }