| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20071012124054.GD8471@hasse.suse.de>
Date: Fri, 12 Oct 2007 14:40:54 +0200
From: Jan Blunck <jblunck@...e.de>
To: mingo@...hat.com
Cc: Linux-Kernel Mailinglist <linux-kernel@...r.kernel.org>,
Andrew Morton <akpm@...l.org>
Subject: kernel NULL pointer dereference in check_spread+0x0/0x26
This is with 2.6.23-mm1 and allmodconfig.
Seems that se in the following is a NULL pointer.
453 static void check_spread(struct cfs_rq *cfs_rq, struct
sched_entity *se)
454 {
455 #ifdef CONFIG_SCHED_DEBUG
456 s64 d = se->vruntime - cfs_rq->min_vruntime;
457
458 if (d < 0)
459 d = -d;
Cheers,
Jan
--
[ 1.344000] Unable to handle kernel NULL pointer dereference at 0000000000000040 RIP:
[ 1.348000] [<ffffffff8022dd7d>] check_spread+0x0/0x26
[ 1.356000] PGD 0
[ 1.360000] Oops: 0000 [1] SMP
[ 1.364000] last sysfs file:
[ 1.368000] CPU 1
[ 1.368000] Modules linked in:
[ 1.372000] Pid: 2, comm: kthreadd Not tainted 2.6.23-mm1-jbl-gab69b1c9 #4
[ 1.380000] RIP: 0010:[<ffffffff8022dd7d>] [<ffffffff8022dd7d>] check_spread+0x0/0x26
[ 1.388000] RSP: 0018:ffff810005753d58 EFLAGS: 00010083
[ 1.392000] RAX: 0000000000001908 RBX: ffff81008006b900 RCX: 0000000000000c31
[ 1.400000] RDX: 0000000003938700 RSI: 0000000000000000 RDI: ffff81008006b900
[ 1.408000] RBP: ffff810005753d90 R08: ffff810005753d40 R09: ffff8100800d0798
[ 1.416000] R10: ffffffffffffffff R11: 0000000000000001 R12: ffff810005c12000
[ 1.424000] R13: ffff810005c12048 R14: 0000000000000000 R15: 0000000000000001
[ 1.428000] FS: 0000000000000000(0000) GS:ffff810005401960(0000) knlGS:0000000000000000
[ 1.440000] CS: 0010 DS: 0018 ES: 0018 CR0: 000000008005003b
[ 1.444000] CR2: 0000000000000040 CR3: 0000000000201000 CR4: 00000000000006e0
[ 1.452000] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1.460000] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1.468000] Process kthreadd (pid: 2, threadinfo ffff810005752000, task ffff810005750000)
[ 1.476000] last branch before last exception/interrupt
[ 1.480000] from [<ffffffff802363f2>] task_new_fair+0xd0/0x111
[ 1.488000] to [<ffffffff8022dd7d>] check_spread+0x0/0x26
[ 1.492000] Stack: ffffffff802363f7 ffff8100800d0780 ffff8100800d0780 ffff810005c12000
[ 1.500000] 000000000000000f 0000000000000000 0000000000000000 ffff810005753dc0
[ 1.508000] ffffffff80236cf1 0000000000800711 0000000000000286 ffff810005c12000
[ 1.516000] Call Trace:
[ 1.520000] [<ffffffff802363f7>] task_new_fair+0xd5/0x111
[ 1.524000] [<ffffffff80236cf1>] wake_up_new_task+0x84/0xb8
[ 1.532000] [<ffffffff802395be>] do_fork+0x186/0x286
[ 1.536000] [<ffffffff8025e101>] __lock_acquire+0xe4b/0xf40
[ 1.544000] [<ffffffff8020d021>] kernel_thread+0x81/0xde
[ 1.548000] [<ffffffff8024fc72>] kthread+0x0/0x76
[ 1.552000] [<ffffffff8020d07e>] child_rip+0x0/0x12
[ 1.560000] [<ffffffff8024fad1>] kthreadd+0xcd/0x143
[ 1.564000] [<ffffffff8020d088>] child_rip+0xa/0x12
[ 1.568000] [<ffffffff8020c79c>] restore_args+0x0/0x30
[ 1.576000] [<ffffffff802a9bea>] __mpol_free+0x3b/0x40
[ 1.580000] [<ffffffff8024fa04>] kthreadd+0x0/0x143
[ 1.584000] [<ffffffff8020d07e>] child_rip+0x0/0x12
[ 1.592000]
[ 1.592000] INFO: lockdep is turned off.
[ 1.596000]
[ 1.596000] Code: 48 8b 46 40 48 2b 47 20 55 48 89 e5 48 99 48 31 d0 48 29 d0
[ 1.604000] RIP [<ffffffff8022dd7d>] check_spread+0x0/0x26
[ 1.612000] RSP <ffff810005753d58>
[ 1.616000] CR2: 0000000000000040
[ 1.620000] kthreadd used greatest stack depth: 5512 bytes left
[ 36.348000] BUG: spinlock lockup on CPU#2, swapper/0, ffff8100800d0780
[ 36.356000]
[ 36.356000] Call Trace:
[ 36.360000] <IRQ> [<ffffffff80357e07>] _raw_spin_lock+0x126/0x14e
[ 36.368000] [<ffffffff80449e5f>] _spin_lock+0x46/0x53
[ 36.372000] [<ffffffff80235547>] scheduler_tick+0x42/0x1d8
[ 36.376000] [<ffffffff80244684>] update_process_times+0x82/0x92
[ 36.384000] [<ffffffff80257bd6>] tick_periodic+0x6e/0x7a
[ 36.388000] [<ffffffff80257c03>] tick_handle_periodic+0x21/0x5e
[ 36.396000] [<ffffffff8020b244>] default_idle+0x0/0x64
[ 36.400000] [<ffffffff8021d226>] smp_local_timer_interrupt+0x5a/0x5e
[ 36.408000] [<ffffffff8021d83e>] smp_apic_timer_interrupt+0x3a/0x54
[ 36.416000] [<ffffffff8020b244>] default_idle+0x0/0x64
[ 36.420000] [<ffffffff8020ceab>] apic_timer_interrupt+0x6b/0x70
[ 36.428000] <EOI> [<ffffffff8020b28e>] default_idle+0x4a/0x64
[ 36.432000] [<ffffffff8020b28c>] default_idle+0x48/0x64
[ 36.440000] [<ffffffff8020b365>] cpu_idle+0xbd/0xf8
[ 36.444000] [<ffffffff8021cd77>] start_secondary+0x3d6/0x3e7
[ 36.448000]
[ 36.452000] INFO: lockdep is turned off.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists