linux-kernel - Re: Linux 2.6.25-rc2

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Tue, 19 Feb 2008 19:39:29 +0100
From:	"Torsten Kaiser" <just.for.lkml@...glemail.com>
To:	"Mathieu Desnoyers" <mathieu.desnoyers@...ymtl.ca>
Cc:	"Pekka Enberg" <penberg@...helsinki.fi>,
	"Ingo Molnar" <mingo@...e.hu>,
	"Linus Torvalds" <torvalds@...ux-foundation.org>,
	"Linux Kernel Mailing List" <linux-kernel@...r.kernel.org>,
	"Christoph Lameter" <clameter@....com>
Subject: Re: Linux 2.6.25-rc2

On Feb 19, 2008 3:02 PM, Mathieu Desnoyers <mathieu.desnoyers@...ymtl.ca> wrote:
> Sure,
>
> Initial thoughts :
>
> I'd like to get the complete config causing this bug. I suspect either :

The .config I used in 2.6.25-rc2 is attached.

> - A race between the lockless algo and an IRQ in a driver allocating
>   memory.
> - stat(c, ALLOC_FASTPATH); seems to be using a var++, therefore
>   indicating it is not reentrant if IRQs are disabled. Since those are
>   only stats, I guess it's ok, but still weird.
> - CPU hotplug problem.
>   http://bugzilla.kernel.org/attachment.cgi?id=14877&action=view shows
>   last sysfs file:
>   /sys/devices/system/cpu/cpu3/cache/index2/shared_cpu_map
>   -- is this linked to a cpu up/down event ?

# CONFIG_HOTPLUG_CPU is not set

I expect my system would get rather angry if I try to remove a cpu
while it is running. ;)

And as I don't use suspend, I wanted to stay away from any bugs that
might result from this.

> Since this shows mostly with network card drivers, I think the most
> plausible cause would be an IRQ nesting over kmem_cache_alloc_node and
> calling it.

Thanks to yanmin crashing his machine with hackbench I now have a much
better testcase than recompiling KDE.
Starting hackbench will result in an nearly instant crash, if there is
a floodping running against the system.

This new testcase also showed that 2.6.24-rc2-mm1 can also be crashed
in this way.

I will try the patches from this tread against this new testcase and
report the results.

Torsten

View attachment "config-2.6.25-rc2.txt" of type "text/plain" (52728 bytes)