linux-kernel - Re: [BUG] null-pointer in task_rq

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <loom.20110815T091606-71@post.gmane.org>
Date:	Mon, 15 Aug 2011 07:22:29 +0000 (UTC)
From:	scream <scream@....dn.ua>
To:	linux-kernel@...r.kernel.org
Subject: Re: [BUG] null-pointer in task_rq_lock (2.6.35 to 3.0-rc7)

Harald Laabs <kernelml <at> dasr.de> writes:

> 
> Hi,
> reloading an apache httpd can crash the kernel since 2.6.35.
> It seems that tasks are removed between creating the task-list and
> calling wake_up_sem_queue_do in freeary. The pointers to the
> task_struct elements end up in try_to_wake_up and sometimes contain
> 0x0 there.


Had the same in production.

Linux version 2.6.35-22-server (buildd@...spice) (gcc version 4.4.5 
(Ubuntu/Linaro 4.4.4-14ubuntu4) ) #33-Ubuntu SMP Sun Sep 19 20:48:58 UTC 2010 
(Ubuntu 2.6.35-22.33-server 2.6.35.4)

 Apache/2.2.16 (Ubuntu) PHP/5.3.3-1ubuntu9 with Suhosin-Patch mod_ssl/2.2.16 
OpenSSL/0.9.8o

Appeared 2 times after apache2 reload during cron daily jobs.


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/