linux-kernel - Re: Radeon RS780 - BUG: unable to handle kernel NULL pointer dereference

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <AANLkTimT71Y_hFVjKbY5GFBJ7wP9AWo8RgurYiftneo+@mail.gmail.com>
Date:	Mon, 8 Nov 2010 14:36:39 -0500
From:	Jerome Glisse <j.glisse@...il.com>
To:	Markus Trippelsdorf <markus@...ppelsdorf.de>
Cc:	dri-devel@...ts.freedesktop.org, linux-kernel@...r.kernel.org,
	airlied@...ux.ie
Subject: Re: Radeon RS780 - BUG: unable to handle kernel NULL pointer dereference

On Mon, Nov 8, 2010 at 2:02 PM, Markus Trippelsdorf
<markus@...ppelsdorf.de> wrote:
> On Mon, Nov 08, 2010 at 07:43:02PM +0100, Markus Trippelsdorf wrote:
>> On Mon, Nov 08, 2010 at 06:07:37PM +0100, Markus Trippelsdorf wrote:
>> > On Mon, Nov 08, 2010 at 06:02:21PM +0100, Markus Trippelsdorf wrote:
>> > > I can trigger a kernel crash on my system by simply loading this png
>> > > image with firefox:
>> > > http://mediaarchive.cern.ch/MediaArchive/Photo/Public/2010/1011251/1011251_01/1011251_01-A4-at-144-dpi.jpg
>> >
>> > Sorry the above link is wrong, this is the right one (that triggers the
>> > crash):
>> > http://cdsweb.cern.ch/record/1305179/files/HI-150431-630470-huge.png
>>
>> I triggered it a few more times and took the attached picture.
>> It points to the BUG() call at drivers/gpu/drm/ttm/ttm_bo.c:1628 .
>> (Sorry for the bad picture quality)
>
> And here the same BUG in plaintext (should be a bit easier to read):
>
> Nov  8 19:28:23 arch kernel: ------------[ cut here ]------------
> Nov  8 19:28:23 arch kernel: kernel BUG at drivers/gpu/drm/ttm/ttm_bo.c:1628!

Quite puzzling it is as if there was already a bo at same offset in rb
tree but not
in vm mm. Maybe some other race in destruction...

Cheers,
Jerome Glisse
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/