| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Fri, 2 May 2014 13:06:52 -0400 (EDT) From: Vince Weaver <vincent.weaver@...ne.edu> To: Peter Zijlstra <peterz@...radead.org> cc: Vince Weaver <vincent.weaver@...ne.edu>, Thomas Gleixner <tglx@...utronix.de>, Ingo Molnar <mingo@...nel.org>, linux-kernel@...r.kernel.org, Steven Rostedt <rostedt@...dmis.org> Subject: Re: [perf] more perf_fuzzer memory corruption On Fri, 2 May 2014, Peter Zijlstra wrote: > > Can you give this a spin? > > --- > Subject: perf: Fix race in removing an event > From: Peter Zijlstra <peterz@...radead.org> > Date: Fri May 2 16:56:01 CEST 2014 Nope, still shows the bug pretty quickly: [ 210.411542] ------------[ cut here ]------------ [ 210.416638] WARNING: CPU: 7 PID: 2646 at kernel/events/core.c:3232 __free_event+0x93/0xa0() [ 210.425777] Modules linked in: fuse snd_hda_codec_realtek snd_hda_codec_hdmi snd_hda_codec_generic x86_pkg_temp_thermal intel_powerclamp coretemp kvm snd_hda_intel snd_hda_controller snd_hda_codec snd_hwdep snd_pcm i915 crct10dif_pclmul crc32_pclmul snd_seq snd_timer ghash_clmulni_intel snd_seq_device aesni_intel aes_x86_64 snd lrw gf128mul ppdev glue_helper soundcore evdev drm_kms_helper iTCO_wdt drm i2c_algo_bit iTCO_vendor_support mei_me mei psmouse ablk_helper cryptd parport_pc i2c_i801 i2c_core tpm_tis battery lpc_ich mfd_core wmi parport serio_raw tpm pcspkr button processor video sd_mod sr_mod crc_t10dif cdrom crct10dif_common ahci libahci ehci_pci e1000e libata ptp xhci_hcd crc32c_intel ehci_hcd usbcore scsi_mod pps_core usb_common fan thermal thermal_sys [ 210.500288] CPU: 7 PID: 2646 Comm: perf_fuzzer Not tainted 3.15.0-rc1+ #101 [ 210.507740] Hardware name: LENOVO 10AM000AUS/SHARKBAY, BIOS FBKT72AUS 01/26/2014 [ 210.515703] 0000000000000009 ffff8800cdf03b78 ffffffff81649b70 0000000000000000 [ 210.523768] ffff8800cdf03bb0 ffffffff810646ad ffff880036ee9000 0000000000000000 [ 210.531931] ffff8800cdb00a10 ffff8800cdb23248 ffff880036ee92a0 ffff8800cdf03bc0 [ 210.539985] Call Trace: [ 210.542647] [<ffffffff81649b70>] dump_stack+0x45/0x56 [ 210.548199] [<ffffffff810646ad>] warn_slowpath_common+0x7d/0xa0 [ 210.554644] [<ffffffff8106478a>] warn_slowpath_null+0x1a/0x20 [ 210.560916] [<ffffffff81133083>] __free_event+0x93/0xa0 [ 210.566679] [<ffffffff81133c6e>] _free_event+0xce/0x210 [ 210.572386] [<ffffffff81133f30>] put_event+0x180/0x1f0 [ 210.578004] [<ffffffff81133e20>] ? put_event+0x70/0x1f0 [ 210.583730] [<ffffffff81133fd7>] perf_release+0x17/0x20 [ 210.589443] [<ffffffff811b68cc>] __fput+0xdc/0x1e0 [ 210.594698] [<ffffffff811b6a1e>] ____fput+0xe/0x10 [ 210.599948] [<ffffffff81085137>] task_work_run+0xa7/0xe0 [ 210.605786] [<ffffffff81066d5c>] do_exit+0x2cc/0xa50 [ 210.611233] [<ffffffff81076949>] ? get_signal_to_deliver+0x249/0x650 [ 210.618186] [<ffffffff8106756c>] do_group_exit+0x4c/0xc0 [ 210.623995] [<ffffffff81076991>] get_signal_to_deliver+0x291/0x650 [ 210.630731] [<ffffffff81012438>] do_signal+0x48/0x990 [ 210.636246] [<ffffffff81655992>] ? do_page_fault+0x22/0x30 [ 210.642268] [<ffffffff81012df0>] do_notify_resume+0x70/0xa0 [ 210.648350] [<ffffffff81651ebc>] retint_signal+0x48/0x8c [ 210.654207] ---[ end trace 55a1ac7c9a3f451c ]--- [ 212.567179] Slab corruption (Tainted: G W ): kmalloc-2048 start=ffff880036ee9000, len=2048 [ 212.576985] 040: 6b 6b 6b 6b 6b 6b 6b 6b a8 15 94 cf 00 88 ff ff kkkkkkkk........ -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists