netdev - Re: BNX2X driver: kernel panic when running netperf

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <20071016.164938.66177554.davem@davemloft.net>
Date:	Tue, 16 Oct 2007 16:49:38 -0700 (PDT)
From:	David Miller <davem@...emloft.net>
To:	masbock@...ibm.com
Cc:	netdev@...r.kernel.org
Subject: Re: BNX2X driver: kernel panic when running netperf

From: Max Asbock <masbock@...ibm.com>
Date: Tue, 16 Oct 2007 16:34:40 -0700

> I tested the bnx2x driver (0001-BNX2X-0.40.10a-net-2.6.24.patch) with
> netdev-2.6.24 git tree and found that I can reproducibly panic the
> system when running netperf with the TCP_STREAM test.
> I copied the following information from the panic message:
> RIP: 0xc02fff32
> net_rx_action +0x142/0x190

The driver is doing netif_rx_complete() yet returning a value from
->poll() which is >= budget, which is illegal.

We had to fix a similar bug in the tg3 and bnx2 drivers, the same
logic probably just propagated itself into bnx2x.
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html