| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20180305034550.vlkvbq4iihctyr7o@shao2-debian>
Date: Mon, 5 Mar 2018 11:45:50 +0800
From: kernel test robot <fengguang.wu@...el.com>
To: Stephen Smalley <sds@...ho.nsa.gov>
Cc: Ingo Molnar <mingo@...nel.org>, linux-kernel@...r.kernel.org,
LKP <lkp@...org>
Subject: [lkp-robot] [bisect done] e1a58320a3 [ 1.083188] WARNING: CPU: 0
PID: 1 at arch/x86/mm/dump_pagetables.c:225 note_page()
Greetings,
0day kernel testing robot got the below dmesg and the first bad commit is
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master
commit e1a58320a38dfa72be48a0f1a3a92273663ba6db
Author: Stephen Smalley <sds@...ho.nsa.gov>
AuthorDate: Mon Oct 5 12:55:20 2015 -0400
Commit: Ingo Molnar <mingo@...nel.org>
CommitDate: Tue Oct 6 11:11:48 2015 +0200
x86/mm: Warn on W^X mappings
Warn on any residual W+X mappings after setting NX
if DEBUG_WX is enabled. Introduce a separate
X86_PTDUMP_CORE config that enables the code for
dumping the page tables without enabling the debugfs
interface, so that DEBUG_WX can be enabled without
exposing the debugfs interface. Switch EFI_PGT_DUMP
to using X86_PTDUMP_CORE so that it also does not require
enabling the debugfs interface.
On success it prints this to the kernel log:
x86/mm: Checked W+X mappings: passed, no W+X pages found.
On failure it prints a warning and a count of the failed pages:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 1 at arch/x86/mm/dump_pagetables.c:226 note_page+0x610/0x7b0()
x86/mm: Found insecure W+X mapping at address ffffffff81755000/__stop___ex_table+0xfa8/0xabfa8
[...]
Call Trace:
[<ffffffff81380a5f>] dump_stack+0x44/0x55
[<ffffffff8109d3f2>] warn_slowpath_common+0x82/0xc0
[<ffffffff8109d48c>] warn_slowpath_fmt+0x5c/0x80
[<ffffffff8106cfc9>] ? note_page+0x5c9/0x7b0
[<ffffffff8106d010>] note_page+0x610/0x7b0
[<ffffffff8106d409>] ptdump_walk_pgd_level_core+0x259/0x3c0
[<ffffffff8106d5a7>] ptdump_walk_pgd_level_checkwx+0x17/0x20
[<ffffffff81063905>] mark_rodata_ro+0xf5/0x100
[<ffffffff817415a0>] ? rest_init+0x80/0x80
[<ffffffff817415bd>] kernel_init+0x1d/0xe0
[<ffffffff8174cd1f>] ret_from_fork+0x3f/0x70
[<ffffffff817415a0>] ? rest_init+0x80/0x80
---[ end trace a1f23a1e42a2ac76 ]---
x86/mm: Checked W+X mappings: FAILED, 171 W+X pages found.
Signed-off-by: Stephen Smalley <sds@...ho.nsa.gov>
Acked-by: Kees Cook <keescook@...omium.org>
Cc: Andy Lutomirski <luto@...capital.net>
Cc: Arjan van de Ven <arjan@...ux.intel.com>
Cc: Borislav Petkov <bp@...en8.de>
Cc: Brian Gerst <brgerst@...il.com>
Cc: Denys Vlasenko <dvlasenk@...hat.com>
Cc: H. Peter Anvin <hpa@...or.com>
Cc: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: Mike Galbraith <efault@....de>
Cc: Peter Zijlstra <peterz@...radead.org>
Cc: Thomas Gleixner <tglx@...utronix.de>
Cc: linux-kernel@...r.kernel.org
Link: http://lkml.kernel.org/r/1444064120-11450-1-git-send-email-sds@tycho.nsa.gov
[ Improved the Kconfig help text and made the new option default-y
if CONFIG_DEBUG_RODATA=y, because it already found buggy mappings,
so we really want people to have this on by default. ]
Signed-off-by: Ingo Molnar <mingo@...nel.org>
38a413cbc2 Merge tag 'v4.3-rc3' into x86/mm, to pick up fixes before applying new changes
e1a58320a3 x86/mm: Warn on W^X mappings
0eb3412a68 Merge tag 'kbuild-fixes-v4.16' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild
80253003d5 Add linux-next specific files for 20180302
+-------------------------------------------------------+------------+------------+------------+---------------+
| | 38a413cbc2 | e1a58320a3 | 0eb3412a68 | next-20180302 |
+-------------------------------------------------------+------------+------------+------------+---------------+
| boot_successes | 31 | 0 | 0 | 20 |
| boot_failures | 0 | 11 | 11 | 35 |
| WARNING:at_arch/x86/mm/dump_pagetables.c:#note_page() | 0 | 11 | | |
| calltrace:mark_rodata_ro | 0 | 11 | | |
| WARNING:at_arch/x86/mm/dump_pagetables.c:#note_page | 0 | 0 | 11 | 35 |
| EIP:note_page | 0 | 0 | 11 | 35 |
+-------------------------------------------------------+------------+------------+------------+---------------+
[ 1.080284] debug: unmapping init [mem 0xc165a000-0xc16b1fff]
[ 1.081000] Write protecting the kernel text: 4120k
[ 1.081558] Write protecting the kernel read-only data: 1936k
[ 1.082140] NX-protecting the kernel data: 4072k
[ 1.082715] ------------[ cut here ]------------
[ 1.083188] WARNING: CPU: 0 PID: 1 at arch/x86/mm/dump_pagetables.c:225 note_page+0xd9/0x551()
[ 1.084232] x86/mm: Found insecure W+X mapping at address c00a0000/0xc00a0000
[ 1.084951] Modules linked in:
[ 1.085276] CPU: 0 PID: 1 Comm: swapper Not tainted 4.3.0-rc3-00013-ge1a5832 #1
[ 1.085998] 00000000 cf037ed4 cf037eac c112d4e5 cf037ec4 c102c71e c1027bec 00000000
[ 1.086875] cf037f4c 80000000 cf037edc c102c75b 00000009 cf037ed4 c1547a1d cf037ef0
[ 1.087755] cf037f18 c1027bec c1547a53 000000e1 c1547a1d c00a0000 c00a0000 80000000
[ 1.088628] Call Trace:
[ 1.088881] [<c112d4e5>] dump_stack+0x16/0x18
[ 1.089330] [<c102c71e>] warn_slowpath_common+0x72/0x89
[ 1.102991] [<c1027bec>] ? note_page+0xd9/0x551
[ 1.103479] [<c102c75b>] warn_slowpath_fmt+0x26/0x2a
[ 1.104004] [<c1027bec>] note_page+0xd9/0x551
[ 1.104452] [<c10281ed>] ptdump_walk_pgd_level_core+0x189/0x231
[ 1.105082] [<c1028336>] ptdump_walk_pgd_level_checkwx+0x11/0x13
[ 1.105711] [<c1022596>] mark_rodata_ro+0xf2/0xfa
[ 1.106196] [<c13febc8>] kernel_init+0x17/0xb5
[ 1.106685] [<c1404980>] ret_from_kernel_thread+0x20/0x30
[ 1.107241] [<c13febb1>] ? rest_init+0x65/0x65
[ 1.107697] ---[ end trace 060121bdcb514a50 ]---
[ 1.108873] x86/mm: Checked W+X mappings: FAILED, 96 W+X pages found.
# HH:MM RESULT GOOD BAD GOOD_BUT_DIRTY DIRTY_NOT_BAD
git bisect start v4.4 v4.3 --
git bisect bad cd6caf550a2adc763c6301ecc0be01f422fb2aea # 03:47 B 0 1 15 0 Merge tag 'for-linus-4.4' of git://git.code.sf.net/p/openipmi/linux-ipmi
git bisect bad 713009809681e5a7871e96e6992692c805b4480b # 04:04 B 0 11 25 0 Merge tag 'ext4_for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4
git bisect bad ccf21b69a83afaee4d5499e0d03eacf23946e08c # 04:17 B 0 11 25 0 Merge branch 'for-4.4/reservations' of git://git.kernel.dk/linux-block
git bisect good b831ef2cad979912850e34f82415c0c5d59de8cb # 04:27 G 11 0 0 0 Merge branch 'ras-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
git bisect bad ccc9d4a6d640cbde05d519edeb727881646cf71b # 04:39 B 0 11 25 0 Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
git bisect good f323c49b300baf89e2cb4050b0def1856c0b1852 # 04:51 G 11 0 0 0 Merge branch 'x86-cpu-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
git bisect good 4302d506d5f3419109abdd0d6e400ed6e8148209 # 05:01 G 11 0 0 0 Merge branch 'x86-headers-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
git bisect bad 639ab3eb38c6e92e27e061551dddee6dd3bbb5d2 # 05:10 B 0 3 17 0 Merge branch 'x86-mm-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
git bisect good 34437e67a6727885bdf6cbfd8441b1ac43a1ee65 # 05:39 G 11 0 0 0 x86/mm: Fix slow_virt_to_phys() to handle large PAT bit
git bisect good d551aaa2f7e1387fa66093ce9914c2e91f283a50 # 05:52 G 11 0 0 0 x86/mm: Fix __split_large_page() to handle large PAT bit
git bisect good 38a413cbc2b2834683b21823d964bc2d2f0abb82 # 06:02 G 11 0 0 0 Merge tag 'v4.3-rc3' into x86/mm, to pick up fixes before applying new changes
git bisect bad e1a58320a38dfa72be48a0f1a3a92273663ba6db # 06:10 B 0 3 17 0 x86/mm: Warn on W^X mappings
# first bad commit: [e1a58320a38dfa72be48a0f1a3a92273663ba6db] x86/mm: Warn on W^X mappings
git bisect good 38a413cbc2b2834683b21823d964bc2d2f0abb82 # 06:20 G 30 0 0 0 Merge tag 'v4.3-rc3' into x86/mm, to pick up fixes before applying new changes
# extra tests on HEAD of linux-devel/devel-catchup-201803031118
git bisect bad ba235f49bddf85677b48d0f50e2a8cbab4b8b266 # 06:20 B 0 28 63 18 0day head guard for 'devel-catchup-201803031118'
# extra tests on tree/branch linus/master
git bisect bad 0eb3412a68c354c0aa4adc4a24ec533154bd2172 # 06:32 B 0 11 25 0 Merge tag 'kbuild-fixes-v4.16' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild
# extra tests on tree/branch linux-next/master
git bisect bad 80253003d5da3b82d6bebfb755a04c24011e90e2 # 06:33 B 0 35 63 0 Add linux-next specific files for 20180302
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
Download attachment "dmesg-openwrt-lkp-hsw01-107:20180304061053:i386-randconfig-c0-03031136:4.3.0-rc3-00013-ge1a5832:1.gz" of type "application/gzip" (9799 bytes)
View attachment "reproduce-openwrt-lkp-hsw01-107:20180304061053:i386-randconfig-c0-03031136:4.3.0-rc3-00013-ge1a5832:1" of type "text/plain" (918 bytes)
View attachment "config-4.3.0-rc3-00013-ge1a5832" of type "text/plain" (99256 bytes)
Powered by blists - more mailing lists