linux-kernel - Re: OOPS in hiddev_open on connecting "Logitech MX620 Laser Cordless Mouse"

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <AANLkTimpXSrbZ6pAi3OWTmHrUnHPxwAnE1kEvmCj7G+r@mail.gmail.com>
Date:	Sat, 18 Sep 2010 11:48:05 +0200
From:	Mat <jackdachef@...il.com>
To:	raa.lkml@...il.com
Cc:	Linux Kernel <linux-kernel@...r.kernel.org>, guichaz@...il.com,
	jkosina@...e.cz
Subject: Re: OOPS in hiddev_open on connecting "Logitech MX620 Laser Cordless Mouse"

Hi everybody,

I've been noticing this also since a few days and have the same mouse
model. For me it's getting triggered when hald (which seemingly still
is needed by KDE4) is started:

   50.778558] BUG: unable to handle kernel NULL pointer dereference at (null)
[   50.779448] IP: [<ffffffff8159c4b3>] hiddev_open+0xa3/0x1b0
[   50.780371] PGD 0
[   50.781480] Oops: 0000 [#1] PREEMPT SMP
[   50.782671] last sysfs file:
/sys/devices/pci0000:00/0000:00:1f.2/host5/target5:0:0/5:0:0:0/block/sdd/size
[   50.783649] CPU 7
[   50.783659] Modules linked in: fglrx(P) firewire_ohci i2c_i801
firewire_core e1000e wmi shpchp tg3 libphy e1000 scsi_wait_scan
sl811_hcd ohci_hcd ssb usb_storage ehci_hcd
[   50.785661]
[   50.786647] Pid: 5576, comm: hald-probe-hidd Tainted: P
2.6.36-rc4_plus_v2+ #2 FMP55/ipower G3710
[   50.787712] RIP: 0010:[<ffffffff8159c4b3>]  [<ffffffff8159c4b3>]
hiddev_open+0xa3/0x1b0
[   50.788784] RSP: 0018:ffff8801bafe9ca8  EFLAGS: 00010296
[   50.789889] RAX: 0000000000000000 RBX: ffff8801bb155400 RCX: 0000000000000004
[   50.790998] RDX: ffffffff81de4008 RSI: ffffffff81a03638 RDI: ffff8801bb1fc030
[   50.792105] RBP: ffff8801bb1f0000 R08: ffffea00060eec88 R09: 0000000000000000
[   50.793266] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000
[   50.794478] R13: 00000000ffffffed R14: ffffffff818f24e0 R15: ffff8801bfa8abd0
[   50.795639] FS:  00007f17699ba700(0000) GS:ffff8800023c0000(0000)
knlGS:0000000000000000
[   50.796810] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   50.798021] CR2: 0000000000000000 CR3: 00000001bc3e5000 CR4: 00000000000006e0
[   50.799250] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   50.800541] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[   50.801786] Process hald-probe-hidd (pid: 5576, threadinfo
ffff8801bafe8000, task ffff8801bc3c5dc0)
[   50.803057] Stack:
[   50.804341]  ffff8801bafe9d24 0000000000000000 ffff8801bb155400
ffffffff818e2b00
[   50.804378] <0> ffff8801bb0fb850 ffffffff814d9a74 ffff8801bb0fb850
ffff8801bb155400
[   50.805709] <0> ffff8801bfdd4900 0000000000000000 ffffffff810daf10
ffffffff810db035
[   50.808363] Call Trace:
[   50.809664]  [<ffffffff814d9a74>] ? usb_open+0xf4/0x1d0
[   50.811008]  [<ffffffff810daf10>] ? chrdev_open+0x0/0x210
[   50.812387]  [<ffffffff810db035>] ? chrdev_open+0x125/0x210
[   50.813721]  [<ffffffff810d5730>] ? __dentry_open.clone.16+0x100/0x320
[   50.815010]  [<ffffffff810e3ed0>] ? do_last.clone.45+0x3f0/0x690
[   50.816367]  [<ffffffff810e4363>] ? do_filp_open+0x1f3/0x5f0
[   50.817662]  [<ffffffff816b90a5>] ? unix_getname+0x65/0xe0
[   50.818947]  [<ffffffff81742609>] ? _raw_spin_unlock+0x9/0x40
[   50.820280]  [<ffffffff810ef5f4>] ? alloc_fd+0xe4/0x140
[   50.821639]  [<ffffffff810d6896>] ? do_sys_open+0x66/0x130
[   50.822931]  [<ffffffff810026ab>] ? system_call_fastpath+0x16/0x1b
[   50.824283] Code: c0 00 00 48 c7 c2 08 40 de 81 48 c7 c6 38 36 a0
81 e8 d2 8a ac ff 4c 89 a5 18 c0 00 00 48 89 ab c0 00 00 00 48 8b 85
18 c0 00 00 <44> 8b 00 45 85 c0 0f 84 e1 00 00 00 8b 50 04 8d 4a 01 85
d2 89
[   50.827599] RIP  [<ffffffff8159c4b3>] hiddev_open+0xa3/0x1b0
[   50.829040]  RSP <ffff8801bafe9ca8>
[   50.830557] CR2: 0000000000000000
[   50.831998] ---[ end trace e966fc680b209e8f ]---

the first significant related change that catches my eye is:

http://git.eu.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8fe294caf8c868edd9046251824a0af91991bf43
HID: fix hiddev's use of usb_find_interface

Could this be the cause ?

@Alex Riesen:

maybe you could try to revert that commit
(http://git.eu.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=patch;h=8fe294caf8c868edd9046251824a0af91991bf43)
and see whether that fixes it, I'll do the same in my free time

Regards

Mat


(please CC since I'm not subscribed to the list)
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/