linux-kernel - Re: [security] d3b04a4398: WARNING:at_crypto/kdf_sp800108.c:#crypto_kdf108

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Sun, 05 Dec 2021 11:21:56 +0100
From:   Stephan Müller <smueller@...onox.de>
To:     kernel test robot <oliver.sang@...el.com>
Cc:     Herbert Xu <herbert@...dor.apana.org.au>,
        Mat Martineau <mathew.j.martineau@...ux.intel.com>,
        LKML <linux-kernel@...r.kernel.org>,
        Linux Memory Management List <linux-mm@...ck.org>,
        lkp@...ts.01.org, lkp@...el.com
Subject: Re: [security]  d3b04a4398: WARNING:at_crypto/kdf_sp800108.c:#crypto_kdf108_init

Am Dienstag, 30. November 2021, 09:04:19 CET schrieb kernel test robot:

Hi,

...
> 
> 
> +------------------------------------------------------+------------+-------
> -----+
> |                                                      | d792134423 |
> |                                                      | d3b04a4398 |
> 
> +------------------------------------------------------+------------+-------
> -----+
> | boot_successes                                       | 14         | 0     
> |     | boot_failures                                        | 0          |
> | 16         | WARNING:at_crypto/kdf_sp800108.c:#crypto_kdf108_init | 0    
> |      | 16         | EIP:crypto_kdf108_init                              
> | | 0          | 16         |
> +------------------------------------------------------+------------+-------
> -----+
> 
> 
> If you fix the issue, kindly add following tag
> Reported-by: kernel test robot <oliver.sang@...el.com>
> 
> 
> [ 18.648980][ T1] WARNING: CPU: 0 PID: 1 at crypto/kdf_sp800108.c:138
> crypto_kdf108_init (crypto/kdf_sp800108.c:136) [   18.649900][    T1]
> Modules linked in:

The issue is that the self-test fails for 16 out of 30 times, i.e. it is kind 
of random when it happens or not.

I am unable to reproduce it with i386 and clang-13. I can also not reproduce 
it with GCC.

Nor do I see an obvious issue in the code that points to either uninitizlized 
memory or otherwise could affect the test result.

I keep trying with Clang-14


Ciao
Stephan