| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Sun, 02 Aug 2009 07:16:49 +0200 From: Mike Galbraith <efault@....de> To: Pavel Roskin <proski@....org> Cc: linux-wireless <linux-wireless@...r.kernel.org>, LKML <linux-kernel@...r.kernel.org>, "John W. Linville" <linville@...driver.com> Subject: Re: rt2800usb: memory corruption? On Sat, 2009-08-01 at 20:21 -0400, Pavel Roskin wrote: > On Sat, 2009-08-01 at 12:55 +0200, Mike Galbraith wrote: > > > Enabled slub/pagealloc debugging. First down/rmmod said... > > I suggest that you try kmemcheck. It's very slow, but it finds memory > problems when they occur, not when it's too late. > > You may want to disable kmemleak and framebuffer support and make sure > that X doesn't start, at it will be too slow. Slub debugging might > conflict with kmemcheck, so it's better to disable it. I didn't even get as far as down/rmmod. Kmemcheck fired as soon as the interface came up. [ 230.954526] rt2800usb 2-5:1.0: firmware: requesting rt2870.bin [ 231.388801] input: rt2800usb as /devices/pci0000:00/0000:00:1a.7/usb2/2-5/2-5:1.0/input/input4 [ 232.281796] ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 235.428512] wlan0: direct probe to AP 00:1a:4f:9a:d0:12 try 1 [ 235.437710] wlan0 direct probe responded [ 235.437740] wlan0: authenticate with AP 00:1a:4f:9a:d0:12 [ 235.441546] wlan0: authenticated [ 235.441578] wlan0: associate with AP 00:1a:4f:9a:d0:12 [ 235.448697] wlan0: RX AssocResp from 00:1a:4f:9a:d0:12 (capab=0x411 status=0 aid=1) [ 235.448719] wlan0: associated [ 235.495961] ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 246.172043] wlan0: no IPv6 routers present [ 282.661880] WARNING: kmemcheck: Caught 64-bit read from uninitialized memory (ffff8800bfb8c9f0) [ 282.670576] 0000000000000000000000000000000000000000000000000000000000000000 [ 282.678086] u u u u u u u u u u u u u u u u u u u u u u u u u u u u u u u u [ 282.685594] ^ [ 282.690079] [ 282.691571] Modules linked in: nfsd lockd nfs_acl auth_rpcgss sunrpc exportfs snd_pcm_oss snd_mixer_oss snd_seq snd_seq_device ip6t_REJECT nf_conntrack_ipv6 ip6table_raw xt_NOTRACK ipt_REJECT xt_state iptable_raw iptable_filter ip6table_mangle nf_conntrack_netbios_ns nf_conntrack_ipv4 cpufreq_conservative nf_conntrack nf_defrag_ipv4 cpufreq_ondemand cpufreq_userspace ip_tables cpufreq_powersave acpi_cpufreq ip6table_filter ip6_tables x_tables microcode ipv6 fuse loop dm_mod snd_hda_codec_realtek arc4 ecb i2c_i801 firewire_ohci i2c_core firewire_core snd_hda_intel crc_itu_t rt2800usb snd_hda_codec rt2x00usb sr_mod snd_hwdep ohci1394 rt2x00lib cdrom snd_pcm led_class input_polldev sg snd_timer ieee1394 mac80211 snd usb_storage soundcore snd_page_alloc cfg80211 crc_ccitt usb_libusual e1000e intel_agp rtc_cmos rtc_core rtc_lib button thermal processor usbhid hid sd_mod uhci_hcd ehci_hcd usbcore edd fan ext3 mbcache jbd ahci libata scsi_mod [ 282.775664] Pid: 5857, comm: rpcinfo Not tainted 2.6.31-smp #1005 MS-7502 [ 282.782444] RIP: 0010:[<ffffffff8123f6e3>] [<ffffffff8123f6e3>] sk_clone+0x23/0x290 [ 282.790215] RSP: 0018:ffff88000156bb98 EFLAGS: 00010286 [ 282.795521] RAX: ffff8800bfb8c800 RBX: ffff8800bfb8c800 RCX: 0000000000000000 [ 282.802645] RDX: 0000000000000020 RSI: 0000000000000002 RDI: ffff8800bfb8c800 [ 282.809769] RBP: ffff88000156bba8 R08: 0000000000000004 R09: ffff8800be46c838 [ 282.816895] R10: 0000000000000000 R11: 000000000100007f R12: ffff8800bfb88000 [ 282.824021] R13: ffff8800be8eed00 R14: ffff8800bfb88000 R15: ffff8800bfb88000 [ 282.831149] FS: 00007f2e15b5a6f0(0000) GS:ffff880001568000(0000) knlGS:0000000000000000 [ 282.839230] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b [ 282.844966] CR2: ffff8800377da024 CR3: 00000000b3c2c000 CR4: 00000000000006f0 [ 282.852089] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 282.859213] DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 [ 282.866336] [<ffffffff8127f321>] inet_csk_clone+0x11/0xc0 [ 282.871829] [<ffffffff81297c8e>] tcp_create_openreq_child+0x1e/0x420 [ 282.878282] [<ffffffff81296b18>] tcp_v4_syn_recv_sock+0x48/0x280 [ 282.884383] [<ffffffff812979ad>] tcp_check_req+0x1dd/0x4a0 [ 282.889964] [<ffffffff81295c74>] tcp_v4_do_rcv+0x324/0x430 [ 282.895561] [<ffffffff81296414>] tcp_v4_rcv+0x694/0x880 [ 282.900887] [<ffffffff812751d1>] ip_local_deliver_finish+0xd1/0x230 [ 282.907249] [<ffffffff812753bd>] ip_local_deliver+0x8d/0xa0 [ 282.912917] [<ffffffff81274b5e>] ip_rcv_finish+0x19e/0x3f0 [ 282.918498] [<ffffffff81275071>] ip_rcv+0x2c1/0x350 [ 282.923473] [<ffffffff8124c164>] netif_receive_skb+0x314/0x5f0 [ 282.929405] [<ffffffff8124c4b5>] process_backlog+0x75/0xc0 [ 282.934985] [<ffffffff8124ccc8>] net_rx_action+0x108/0x210 [ 282.940567] [<ffffffff8104e972>] __do_softirq+0xe2/0x1c0 [ 282.945975] [<ffffffff8100cf5c>] call_softirq+0x1c/0x30 [ 282.951294] [<ffffffff8100ee65>] do_softirq+0x45/0x80 [ 282.956441] [<ffffffff8104e745>] local_bh_enable_ip+0xa5/0xb0 [ 282.962284] [<ffffffff812f542f>] _spin_unlock_bh+0xf/0x20 [ 282.967779] [<ffffffff8123e567>] release_sock+0xb7/0xd0 [ 282.973098] [<ffffffff812a4cb6>] inet_stream_connect+0x186/0x2c0 [ 282.979200] [<ffffffff8123c938>] sys_connect+0xb8/0xd0 [ 282.984434] [<ffffffff8100be2b>] system_call_fastpath+0x16/0x1b [ 282.990447] [<ffffffffffffffff>] 0xffffffffffffffff [ 328.666950] martian source 192.168.178.31 from 192.168.178.23, on dev wlan0 [ 328.670921] ll header: ff:ff:ff:ff:ff:ff:00:0c:76:67:11:5a:08:06 -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists