linux-kernel - Re: Top 10 kernel oopses for the week ending January 12th, 2008

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:	Tue, 15 Jan 2008 11:36:02 +0100 (CET)
From:	Jiri Kosina <jikos@...os.cz>
To:	Adrian Bunk <bunk@...nel.org>
cc:	Arjan van de Ven <arjan@...ux.intel.com>,
	Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
	Linus Torvalds <torvalds@...ux-foundation.org>,
	Andrew Morton <akpm@...ux-foundation.org>
Subject: Re: Top 10 kernel oopses for the week ending January 12th, 2008

On Sun, 13 Jan 2008, Adrian Bunk wrote:

> > Rank 1: implement (hid code)
> > 	WARN_ON at drivers/hid/hid-core.c:784
> > 	Reported 23 times (39 total reports)
> > 	This appears to be the kernel doing a WARN_ON based on unexpected ioctl() arguments
> > 	More info: http://www.kerneloops.org/search.php?search=implement
> >...
> The only complete bug reports seems to be from one user who loaded a 
> module whose distribution might be considered a criminal act in some 
> countries.

The most usual case is hid2hci utility, that tries to switch modes on 
Bluetooth HID peripherials (via hiddev). When these "switching" packets 
are not compliant with HID report descriptor of the device, this WARN_ON() 
happens.

Unfortunately there is no standard specifying how these packets should 
look like, so it is guess-game and some rev-eng, that Marcel has put into 
hid2hci for individual vendors, and sometimes this just happens not to 
work.

I have had the commit below queued in my tree for 2.6.25 for quite some 
time

commit dbacd67dc33f7b0d5fe64323668cf266d18f4b3f
Author: Jiri Kosina <jkosina@...e.cz>
Date:   Fri Nov 30 11:12:58 2007 +0100

    HID: remove redundant WARN_ON()s in order not to scare users

    The WARN_ON() in implement() and extract() spit out stacktraces and
    a lot of other information that might make users think that there is
    something seriously wrong with the system. WARN_ON() should not be
    deliberately triggerable by userspace application, which these can be.
    Usually this WARN_ON() triggers when hid2hci utility is sending the
    data that don't correspond to the device's report descriptor.

    Convert these messages to more friendly printk().

-- 
Jiri Kosina
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/