netdev - Re: qlge driver corrupting kernel memory

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <1336736301.7361.144.camel@marge.simpson.net>
Date:	Fri, 11 May 2012 13:38:21 +0200
From:	Mike Galbraith <mgalbraith@...e.de>
To:	Thadeu Lima de Souza Cascardo <cascardo@...ux.vnet.ibm.com>
Cc:	netdev <netdev@...r.kernel.org>
Subject: Re: qlge driver corrupting kernel memory

On Tue, 2012-05-08 at 09:07 -0300, Thadeu Lima de Souza Cascardo wrote: 
> On Tue, May 08, 2012 at 01:00:18PM +0200, Mike Galbraith wrote:
> > Greetings network wizards,
> > 
> > $subject is happening in an 2.6.32 enterprise kernel with the driver
> > updated to what looks to me to be 2.6.38 or so.
> > 
> > Allegedly, IFF boxen are running dual CNAs with storage and LAN sharing
> > a port, $subject happens fairly regularly.  Rummaging in crashdumps
> > seems to show corruption happens because we somehow end up stuffing
> > loads of frags into skb_shared_info, scribbling all over the place.
> > 
> > Before I proceed, what I know about skbs can be found here..
> > 
> >     http://vger.kernel.org/~davem/skb_data.html
> > 
> > ..and that's the sum and total ;-)
> > 
> > I guess the first thing I should ask is whether anyone has seen such
> > scribbling with this driver.  Known issue would be a case of happiness,
> > but I doubt that will be the case from searching, so onward.
> > 
> 
> Hi, Mike.
> 
> From what you describe, I suspect this is related to this fix:
> 
> http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=782428535e0819b5b7c9825cd3faa2ad37032a70
> 
> Please, apply and report if that works for you.

Nope, box exploded.  I haven't seen a dump yet, but expect it'll be more
of the same scribbling.

-Mike

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html