linux-kernel - 3.12.3, panic: crashes using kexec in combination with usb on the ARM ST SPEAr320 platform

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Thu, 05 Dec 2013 14:07:00 +0100
From:	Holger Adams <holger.adams@...em.de>
To:	linux-kernel@...r.kernel.org
Subject: 3.12.3, panic: crashes using kexec in combination with usb on the
 ARM ST SPEAr320 platform

Hey All,

I hit some interesting crash with our ARM ST SPEAr320 evaluation board 
using the latest (3.12.3) vanilla kernel.

A small initramfs containing kexec is being included and booted from RAM 
using the latest u-boot. The kernel configuration based on a standard 
spear3xx_defconfig including some stuff for kexec and mass usb storages.

1) How to reproduce

  1. Boot linux
  2. Mount USB mass storage
  3. 'kexec -l' from mounted USB partition
  4. kexec -e
  --> Crash, see file stspear_312_crash

  1. Boot linux
  2. Mount USB-Stick
  2.1 Copy kernel and all other files to /tmp
  2.2 unmount USB mass storage
  2.3. Leaving the USB plugged
  3. 'kexec -l' from /tmp
  4. 'kexec -e'
  --> Crash

  1. Boot linux
  2. Mount USB-Stick
  2.1 Copy kernel and all other files to /tmp
  2.2 Unmount USB mass storage
  2.3. Unplug the usb device
  3. 'kexec -l' from /tmp
  4. kexec -e
  --> Booting. Some mem corrupt. warnings. See file stspear_312_working

2)  cat /proc/version

Linux version 3.12.3 (openembedded@...nembedded) (gcc version 4.7.2 
(GCC) ) #1 Thu Dec 5 09:52:37 CET 2013

3) cat /proc/cpuinfo

root@...ar320-eval:~# cat /proc/cpuinfo
processor       : 0
model name      : ARM926EJ-S rev 5 (v5l)
Features        : swp half thumb fastmult edsp java
CPU implementer : 0x41
CPU architecture: 5TEJ
CPU variant     : 0x0
CPU part        : 0x926
CPU revision    : 5

Hardware        : ST SPEAr320 SoC with Flattened Device Tree
Revision        : 0000
Serial          : 0000000000000000


4) cat /proc/iomem

root@...ar320-eval:~# cat /proc/iomem
00000000-07ffffff : System RAM
   00008000-005537b3 : Kernel code
   00ae6000-00be41af : Kernel data
a3000000-a3000fff : /ahb/apb/serial@...00000
   a3000000-a3000fff : uart-pl011
b3000000-b3000fff : /ahb/pinmux@...00000
d0000000-d0000fff : /ahb/apb/serial@...00000
   d0000000-d0000fff : uart-pl011
d0100000-d0100fff : /ahb/spi@...00000
   d0100000-d0100fff : ssp-pl022
d0180000-d0180fff : /ahb/apb/i2c@...80000
e0800000-e0807fff : /ahb/eth@...00000
e1800000-e1800fff : ehci_hcd
e1900000-e1900fff : ohci_hcd
e2100000-e2100fff : ohci_hcd
fc000000-fc000fff : /ahb/flash@...00000
fc400000-fc400fff : /ahb/dma@...00000
   fc400000-fc400fff : pl08xdmac
fc880000-fc880fff : /ahb/apb/wdt@...80000
   fc880000-fc880fff : sp805_wdt
fc900000-fc900fff : /ahb/apb/rtc@...00000
fc980000-fc980fff : /ahb/apb/gpio@...80000
   fc980000-fc980fff : pl061

5) cat /proc/scsi/scsi

Attached devices:
Host: scsi0 Channel: 00 Id: 00 Lun: 00
   Vendor: INTENSO  Model: USB              Rev: 1100
   Type:   Direct-Access                    ANSI  SCSI revision: 00


Best Regards,
Holger

-- 
Holger Adams, DeZem GmbH
phone: +49 30 3180 0730, fax: +49 30 3180 0731

View attachment "stspear_312_crash" of type "text/plain" (18661 bytes)

View attachment "stspear_312_working" of type "text/plain" (13532 bytes)

View attachment "defconfig" of type "text/plain" (56029 bytes)