linux-kernel - Re: v2.6.26-rc7: BUG task_struct: Poison overwritten

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20080621192845.GB2992@damson.getinternet.no>
Date:	Sat, 21 Jun 2008 21:28:45 +0200
From:	Vegard Nossum <vegard.nossum@...il.com>
To:	Pekka Enberg <penberg@...helsinki.fi>, linux-kernel@...r.kernel.org
Subject: Re: v2.6.26-rc7: BUG task_struct: Poison overwritten

Oops, seems there was another one a bit earlier (about 5 minutes) that I
didn't notice. I don't think it helps that much, but here it is:


 =============================================================================
 BUG task_struct: Poison overwritten
 -----------------------------------------------------------------------------
 
 INFO: 0xf53ab018-0xf53ab02b. First byte 0x71 instead of 0x6b
 INFO: Allocated in copy_process+0x70/0x1090 age=110 cpu=1 pid=28664
 INFO: Freed in free_task+0x2c/0x30 age=68 cpu=0 pid=28667
 INFO: Slab 0xc1ba6cc0 objects=8 used=5 fp=0xf53aafd0 flags=0x400020c3
 INFO: Object 0xf53aafd0 @offset=12240 fp=0xf53acfb0
 
 Bytes b4 0xf53aafc0:  5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
   Object 0xf53aafd0:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
   Object 0xf53aafe0:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
   Object 0xf53aaff0:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
   Object 0xf53ab000:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
   Object 0xf53ab010:  6b 6b 6b 6b 6b 6b 6b 6b 71 19 6f be dd 07 00 00 kkkkkkkkq.o<BE><DD>...
   Object 0xf53ab020:  71 19 6f be 6b 6b 6b 6b 6a 6b 6b eb 6b 6b 6b 6b q.o<BE>kkkkjkk<EB>kkkk
   Object 0xf53ab030:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
   Object 0xf53ab040:  6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
  Redzone 0xf53abf88:  bb bb bb bb                                     <BB><BB><BB><BB>          
  
  Padding 0xf53abfb0:  5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ
 Pid: 1326, comm: udevd Not tainted 2.6.26-rc7 #25
  [<c018f3fa>] print_trailer+0xaa/0xe0
  [<c018f4cb>] check_bytes_and_report+0x9b/0xc0
  [<c018f8b3>] check_object+0x193/0x1f0
  [<c019047b>] __slab_alloc+0x44b/0x5d0
  [<c01909e3>] kmem_cache_alloc+0xb3/0xe0
  [<c01345c0>] ? copy_process+0x70/0x1090
  [<c01345c0>] ? copy_process+0x70/0x1090
  [<c01345c0>] copy_process+0x70/0x1090
  [<c017ff49>] ? remove_vma+0x49/0x60
  [<c01356d7>] do_fork+0x57/0x280
  [<c0180a8a>] ? do_munmap+0x18a/0x1f0
  [<c0180b36>] ? sys_munmap+0x46/0x60
  [<c010652f>] sys_clone+0x2f/0x40
  [<c010831b>] sysenter_past_esp+0x78/0xd1
  =======================
 FIX task_struct: Restoring 0xf53ab018-0xf53ab02b=0x6b
 
 FIX task_struct: Marking all objects used

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/