linux-kernel - Re: Wireless-testing's b43 panics in b43_generate

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <200805311711.16266.mb@bu3sch.de>
Date:	Sat, 31 May 2008 17:11:15 +0200
From:	Michael Buesch <mb@...sch.de>
To:	"Stefanik Gábor" <netrolller.3d@...il.com>
Cc:	"bcm43xx-dev@...ts.berlios.de" <bcm43xx-dev@...ts.berlios.de>,
	linux-wireless <linux-wireless@...r.kernel.org>,
	linux-kernel@...r.kernel.org
Subject: Re: Wireless-testing's b43 panics in b43_generate_txhdr on packet transmit

On Saturday 31 May 2008 16:23:58 Stefanik Gábor wrote:
> In the latest wireless-testing kernel, I get a panic when I try to
> connect to a network or inject a packet in monitor mode using b43
> (stack obtained using kdump and crash):
> 
> crash> bt -l
> PID: 0      TASK: c0431340  CPU: 0   COMMAND: "swapper"
>  #0 [c04617bc] crash_kexec at c015ce2a
>     /usr/src/wl-hack/wireless-testing/kernel/kexec.c: 1077
>  #1 [c046180c] die at c01054ba
>     /usr/src/wl-hack/wireless-testing/arch/x86/kernel/traps_32.c: 476
>  #2 [c0461828] do_page_fault at c034ef1f
>     /usr/src/wl-hack/wireless-testing/arch/x86/mm/fault.c: 858
>  #3 [c0461994] error_code (via page_fault) at c034d2e8
>     /usr/src/wl-hack/wireless-testing/arch/i386/kernel/entry.S
>     EAX: 00000000  EBX: 00000000  ECX: f6103000  EDX: f75ed4a0  EBP: c0461a58
>     DS:  007b      ESI: 00000002  ES:  007b      EDI: 00000074
>     CS:  0060      EIP: f8dd3a99  ERR: ffffffff  EFLAGS: 00010046
>  #4 [c04619c8] b43_generate_txhdr at f8dd3a99
>  #5 [c0461a5c] b43_dma_tx at f8dd83d7
>  #6 [c0461ae4] b43_op_tx at f8dc4d32
>  #7 [c0461afc] __ieee80211_tx at f89c3ed4
>  #8 [c0461b14] ieee80211_master_start_xmit at f89c4b6d
>  #9 [c0461b74] dev_hard_start_xmit at c02d4cb5
>     /usr/src/wl-hack/wireless-testing/net/core/dev.c: 1558
> #10 [c0461ba0] __qdisc_run at c02e678d
>     /usr/src/wl-hack/wireless-testing/net/sched/sch_generic.c: 155
> #11 [c0461bd8] dev_queue_xmit at c02d5172
>     include/net/pkt_sched.h: 89
> #12 [c0461c04] ieee80211_subif_start_xmit at f89c45db
> #13 [c0461cc0] dev_hard_start_xmit at c02d4cb5
>     /usr/src/wl-hack/wireless-testing/net/core/dev.c: 1558
> #14 [c0461cec] __qdisc_run at c02e678d
>     /usr/src/wl-hack/wireless-testing/net/sched/sch_generic.c: 155
> #15 [c0461d24] dev_queue_xmit at c02d5172
>     include/net/pkt_sched.h: 89
> #16 [c0461d50] neigh_resolve_output at c02dac3e
>     /usr/src/wl-hack/wireless-testing/net/core/neighbour.c: 1215
> #17 [c0461d90] ip6_output_finish at f8d55c9e
> #18 [c0461db0] ip6_output2 at f8d57e63
> #19 [c0461dd4] ip6_output at f8d58418
> #20 [c0461e50] mld_sendpack at f8d70d8d
> #21 [c0461ebc] mld_ifc_timer_expire at f8d71a94
> #22 [c0461ef0] run_timer_softirq at c0138547
>     /usr/src/wl-hack/wireless-testing/kernel/timer.c: 798
> #23 [c0461f34] __do_softirq at c0134230
>     /usr/src/wl-hack/wireless-testing/kernel/softirq.c: 234
> #24 [c0461f50] do_softirq at c0134318
>     /usr/src/wl-hack/wireless-testing/kernel/softirq.c: 271
> #25 [c0461f5c] irq_exit at c01344b0
>     /usr/src/wl-hack/wireless-testing/kernel/softirq.c: 310
> #26 [c0461f64] smp_apic_timer_interrupt at c0113583
>     /usr/src/wl-hack/wireless-testing/arch/x86/kernel/apic_32.c: 619
> #27 [c0461f7c] apic_timer_interrupt at c0104963
>     include/linux/kdev_t.h: 52
> #28 [c0461fbc] cpu_idle at c0102d69
>     /usr/src/wl-hack/wireless-testing/arch/x86/kernel/process_32.c: 188
> 
> No out-of-tree patches applied on b43. (I used to have a patch
> applied, but I removed it to test reproducibility of this crash.)
> 
> Any ideas why this happens?

Please provide more information. For example as for what "crash" means.
Is this a NULL pointer dereference or whatever?
Please put a few printks into b43_generate_txhdr()


-- 
Greetings Michael.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/