linux-kernel - Re: [PATCH v2] mm/slub: Avoid list corruption when removing a slab from the full list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <cx3ogasgljkytwb3zwf4qtaujupch3qnyfzr6fvr5anqxdzhfh@eqts4gzr5uvy>
Date: Tue, 8 Oct 2024 21:28:41 +0800
From: "yuan.gao" <yuan.gao@...oud.cn>
To: Vlastimil Babka <vbabka@...e.cz>
Cc: "Christoph Lameter (Ampere)" <cl@...two.org>, 
	Hyeonggon Yoo <42.hyeyoo@...il.com>, penberg@...nel.org, rientjes@...gle.com, iamjoonsoo.kim@....com, 
	akpm@...ux-foundation.org, roman.gushchin@...ux.dev, linux-mm@...ck.org, 
	linux-kernel@...r.kernel.org
Subject: Re: [PATCH v2] mm/slub: Avoid list corruption when removing a slab
 from the full list

On 24/10/08 11:17AM, Vlastimil Babka wrote:
> On 10/7/24 18:40, Christoph Lameter (Ampere) wrote:
> > 
> > list_del() in remove_partial() sets poison values for next/prev so there
> > should no list
> > corruption but a failure showing the poison values.
> 
> Yeah that's what is reported, but there's still a mention of list corruption:
> 
> [ 4277.385669] list_del corruption, ffffea00044b3e50->next is LIST_POISON1 (dead000000000100)
>  
> > static inline void list_del(struct list_head *entry)
> > {
> >         __list_del_entry(entry);
> >         entry->next = LIST_POISON1;
> >         entry->prev = LIST_POISON2;
> > }
> > 
> 

Actually, if panic_on_oops=0, kernel will hang on my x86 system. The
task(kworker here) that triggers the bug dies in the #ud trap handler.

Thanks