linux-kernel - Re: [git pull] DVB + ieee1394: firedtv driver

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Thu, 26 Feb 2009 16:59:46 +0100
From:	Stefan Richter <stefanr@...6.in-berlin.de>
To:	Ingo Molnar <mingo@...e.hu>
CC:	Linus Torvalds <torvalds@...ux-foundation.org>,
	Andrew Morton <akpm@...ux-foundation.org>,
	linux-kernel@...r.kernel.org,
	linux1394-devel@...ts.sourceforge.net, linux-media@...r.kernel.org,
	Mauro Carvalho Chehab <mchehab@...radead.org>,
	Ben Backx <ben@...ckx.com>, Henrik Kurelid <henrik@...elid.se>
Subject: Re: [git pull] DVB + ieee1394: firedtv driver

Ingo Molnar wrote:
> [   13.756029] calling  fdtv_init+0x0/0xf @ 1
> [   13.760074] BUG: unable to handle kernel NULL pointer dereference at 00000054
> [   13.764023] IP: [<c0496393>] driver_find+0xf/0x24
> [   13.764023] *pde = 00000000 
> [   13.764023] Oops: 0000 [#1] SMP 
> [   13.764023] last sysfs file: 
> [   13.764023] 
> [   13.764023] Pid: 1, comm: swapper Not tainted (2.6.29-rc6-tip-01938-gdb50eec-dirty #27473) System Product Name
> [   13.764023] EIP: 0060:[<c0496393>] EFLAGS: 00010286 CPU: 0
> [   13.764023] EIP is at driver_find+0xf/0x24
> [   13.764023] EAX: 00000000 EBX: c0f8d7ac ECX: c0e4a9dd EDX: c0e4a9dd
> [   13.764023] ESI: 00000003 EDI: 00000000 EBP: f70e3f28 ESP: f70e3f28
> [   13.764023]  DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
> [   13.764023] Process swapper (pid: 1, ti=f70e3000 task=f70e8000 task.ti=f70e3000)
> [   13.764023] Stack:
> [   13.764023]  f70e3f38 c04964a5 c0f8d7a0 00000003 f70e3f48 c06eef99 c0f8d6f8 00000003
> [   13.764023]  f70e3f50 c066ac36 f70e3f5c c105c85c 34294a24 f70e3f64 c105c83a f70e3fc0
> [   13.764023]  c0101089 c105c82d 00000000 6f727200 6f632072 2d206564 00203231 f70e3fc0
> [   13.764023] Call Trace:
> [   13.764023]  [<c04964a5>] ? driver_register+0x4b/0x96
> [   13.764023]  [<c06eef99>] ? __hpsb_register_protocol+0x23/0x36
> [   13.764023]  [<c066ac36>] ? hpsb_register_protocol+0xf/0x11
> [   13.764023]  [<c105c85c>] ? fdtv_1394_init+0x20/0x42
> [   13.764023]  [<c105c83a>] ? fdtv_init+0xd/0xf
> [   13.764023]  [<c0101089>] ? do_one_initcall+0x4f/0x11f
> [   13.764023]  [<c105c82d>] ? fdtv_init+0x0/0xf
> [   13.764023]  [<c018b5d9>] ? register_irq_proc+0x87/0xa0
> [   13.764023]  [<c103231a>] ? do_initcalls+0x15/0x25
> [   13.764023]  [<c10325af>] ? kernel_init+0x0/0x97
> [   13.764023]  [<c1032346>] ? do_basic_setup+0x1c/0x1e
> [   13.764023]  [<c1032608>] ? kernel_init+0x59/0x97
> [   13.764023]  [<c011c2b3>] ? kernel_thread_helper+0x7/0x10
> [   13.764023] Code: b8 64 00 00 00 e8 10 49 cc ff e8 2e fc ff ff 85 c0 75 ed e8 eb 37 cd ff 31 c0 5d c3 55 89 e5 e8 34 5f c8 ff 89 c1 8b 42 38 89 ca <8b> 40 54 e8 6c 48 f9 ff 31 d2 85 c0 74 03 8b 50 6c 5d 89 d0 c3 
> 
> Config attached.

Thanks.
Alas I have no Linux box at hand before Saturday.  I wonder, was 
ieee1394_bus_type not yet registered (i.e. ieee1394's ieee1394_init() 
not yet called) at the moment when fdtv_init is executed?

Or what else could have been the NULL pointer dereference in driver_find?

Stefan Richter

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/