lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date:	Fri, 11 Dec 2015 17:07:54 +0200
From:	Andrew <nitr0@...i.kr.ua>
To:	netdev@...r.kernel.org
Subject: Another pppoe-related crash

I've got another pppoe-related crash on one PPPoE BRAS.

Kernel is 4.1.13 with patch "pppoe: fix memory corruption in padt work 
structure"

Crash place:

(gdb) list *unregister_sysctl_table+0x1a
0xc118f26a is in unregister_sysctl_table 
(/var/testpoint/LEAF/source/i486-unknown-linux-uclibc/linux/linux-4.1/fs/proc/proc_sysctl.c:1573).
1568        might_sleep();
1569
1570        if (header == NULL)
1571            return;
1572
1573        nr_subheaders = count_subheaders(header->ctl_table_arg);
1574        if (unlikely(nr_subheaders > 1)) {
1575            struct ctl_table_header **subheaders;
1576            int i;
1577


Here's trace:

[587692.546567] BUG: unable to handle kernel paging request at 05040214
[587692.546602] IP: [<c118f26a>] unregister_sysctl_table+0x1a/0x80
[587692.546626] *pdpt = 000000001d6a9001 *pde = 0000000000000000
[587692.546643] Oops: 0000 [#1] SMP
[587692.546657] Modules linked in: act_mirred pppoe pppox ppp_generic 
slhc iptable_filter xt_length xt_TCPMSS xt_tcpudp xt_mark xt_dscp 
iptable_mangle ip_tables x_tables ipv6 sch_sfq sch_htb cls_u32 
sch_ingress sch_prio sch_tbf cls_flow cls_fw act_police ifb 8021q mrp 
garp stp llc softdog thermal parport_pc parport acpi_cpufreq processor 
asus_atk0110 fan thermal_sys igb(O) k10temp hwmon dca ptp pps_core 
ohci_pci ohci_hcd i2c_nforce2 i2c_core nv_tco sd_mod pata_acpi pcspkr 
ehci_pci pata_amd sata_nv ata_generic ehci_hcd libata usbcore scsi_mod 
usb_common ext4 mbcache jbd2 crc16 vfat fat isofs
[587692.546828] CPU: 0 PID: 7260 Comm: ip-down Tainted: G        W O 
4.1.13-i686 #1
[587692.546851] Hardware name: System manufacturer System Product 
Name/M2N-SLI DELUXE, BIOS ASUS M2N-SLI DELUXE ACPI BIOS Revision 5001 
02/04/2010
[587692.546875] task: dfa89b60 ti: debae000 task.ti: debae000
[587692.546891] EIP: 0060:[<c118f26a>] EFLAGS: 00210206 CPU: 0
[587692.546906] EIP is at unregister_sysctl_table+0x1a/0x80
[587692.546919] EAX: 05040200 EBX: 05040200 ECX: 00000000 EDX: 00000000
[587692.546932] ESI: df359b0c EDI: df359b00 EBP: debafe54 ESP: debafe48
[587692.546946]  DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
[587692.546959] CR0: 8005003b CR2: 05040214 CR3: 1827b740 CR4: 000006f0
[587692.546971] Stack:
[587692.546981]  d613f000 df359b0c df359b00 debafe60 c13783bc d613c000 
debafea8 c13789bf
[587692.547008]  00200246 d9d156e0 f6db82a0 f6401e00 debafe9c c112dc17 
f920844b f920844b
[587692.547035]  d613c000 c132a8fd 00000008 cbe14800 00200246 c1523ff8 
c1524264 00000000
[587692.547060] Call Trace:
[587692.547079]  [<c13783bc>] ? 
__devinet_sysctl_unregister.isra.19+0x1c/0x30
[587692.547094]  [<c13789bf>] ? inetdev_event+0x17f/0x4c0
[587692.547110]  [<c112dc17>] ? kfree+0xf7/0x130
[587692.547126]  [<f920844b>] ? htb_destroy+0xbb/0x100 [sch_htb]
[587692.547142]  [<f920844b>] ? htb_destroy+0xbb/0x100 [sch_htb]
[587692.547158]  [<c132a8fd>] ? fib_rules_event+0x1d/0x1b0
[587692.547174]  [<c1065fdd>] ? notifier_call_chain+0x4d/0x70
[587692.547189]  [<c106610f>] ? raw_notifier_call_chain+0x1f/0x30
[587692.547205]  [<c130d386>] ? rollback_registered_many+0x146/0x280
[587692.547222]  [<c107f811>] ? mutex_optimistic_spin+0x101/0x190
[587692.547236]  [<c130d4e4>] ? rollback_registered+0x24/0x40
[587692.547251]  [<c130e6e7>] ? unregister_netdevice_queue+0x57/0xc0
[587692.547265]  [<c130e76d>] ? unregister_netdev+0x1d/0x30
[587692.547281]  [<f952b614>] ? ppp_shutdown_interface+0xd4/0xf0 
[ppp_generic]
[587692.547297]  [<f952d107>] ? ppp_release+0x67/0x70 [ppp_generic]
[587692.547312]  [<f952d0fc>] ? ppp_release+0x5c/0x70 [ppp_generic]
[587692.547327]  [<c1139fc4>] ? __fput+0x84/0x1b0
[587692.547343]  [<c1063d39>] ? task_work_run+0xa9/0xd0
[587692.547357]  [<c13bb415>] ? work_notifysig+0x16/0x1d
[587692.547369] Code: 9e 22 00 b8 84 2f 5f c1 e8 44 bb 22 00 eb 9d 66 90 
55 89 e5 83 ec 0c 89 5d f4 89 75 f8 89 7d fc 3e 8d 74 26 00 85 c0 89 c3 
74 25 <8b> 40 14 e8 ce f6 ff ff 83 f8 01 7f 25 b8 84 2f 5f c1 e8 0f bb
[587692.547458] EIP: [<c118f26a>] unregister_sysctl_table+0x1a/0x80 
SS:ESP 0068:debafe48
[587692.547481] CR2: 0000000005040214
[587692.547675] ---[ end trace fbeed93ca56120ba ]---

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Powered by blists - more mailing lists