linux-kernel - Re: [TIP] BUG kmalloc-4096: Poison overwritten (ath5k_rx_skb

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20090518100540.GB21150@sucs.org>
Date:	Mon, 18 May 2009 11:05:40 +0100
From:	Sitsofe Wheeler <sitsofe@...oo.com>
To:	Bob Copeland <me@...copeland.com>
Cc:	Jiri Slaby <jirislaby@...il.com>,
	Nick Kossifidis <mickflemm@...il.com>,
	Frederic Weisbecker <fweisbec@...il.com>,
	linux-kernel@...r.kernel.org, linux-wireless@...r.kernel.org,
	ath5k-devel@...ema.h4ckr.net,
	"Luis R. Rodriguez" <lrodriguez@...eros.com>
Subject: Re: [TIP] BUG kmalloc-4096: Poison overwritten (ath5k_rx_skb_alloc)

On Fri, May 15, 2009 at 12:09:04AM -0400, Bob Copeland wrote:
> 
> This is too ugly to live, but I'd like to know if you can reproduce
> with this patch.  If it still happens, then I guess it's back to

I'll try but to this day I still have no clue how to trigger this issue.
I can seemingly go days/weeks without seeing it...

> debugging patches.  I'd love to be able to replicate this here :(

I just wish I could reproduce it on demand. It's so erratic I can't help
feeling the circumstances that make it happen are beyond my control
(e.g. someone else's access point being powered on at that moment /
hardware failure). It's happened in three different places (two houses
and one University) with different access points (one old 802.11b AP
doing WEP, enterprise 802.11g APs at the University doing WPA2 and a
recently purchased ADSL modem/AP doing WPA2 again doing 802.11g). At all
sites it has been possible to see multiple APs (although at the
University it's most likely those APs are going to be on the same
network/configured similarly). It only seems to happen while associated
with an AP. It does not need the computer to have been suspend to
happen. It can happen during the first connection to the AP (no need to
have roamed). So far the issue has never occurred in the first 1000
seconds of being connected to an AP.

One other thing I noticed was that one day I suspend and went home and I
found the AP I was connected to was still showing up in iwlist scan even
though it had been many hours (at least 10) since the last beacon had
been received from that AP ("Extra: Last beacon:" had a very big value).
The AP did not go away until after a reboot.

-- 
Sitsofe | http://sucs.org/~sits/
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/