netdev - double free issue, mvpp2 driver, armada375 modules

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <57272206.6070703@corp.ovh.com>
Date:	Mon, 2 May 2016 11:46:46 +0200
From:	Raphael G <raphael.glon@...p.ovh.com>
To:	<linux-kernel@...r.kernel.org>,
	<linux-arm-kernel@...ts.infradead.org>, <netdev@...r.kernel.org>
CC:	marcin wojtas <mw@...ihalf.com>, <davem@...emloft.net>,
	Grégory Clement 
	<gregory.clement@...e-electrons.com>,
	Thomas Petazzoni <thomas.petazzoni@...e-electrons.com>
Subject: double free issue, mvpp2 driver, armada375 modules

Hello,

enclosed the kernel panic we obtain after boot with a slightly patched 
upstream kernel (4.5.2).

(as well as the patchset applied to the upstream kernel, so that you can 
know which code we are talking about. Too bad we cannot use the upstream 
kernel but we had no choice about this + we're no experts so we rely on 
provided patches, adapted to our bootloader and hardware for this)

Reproduce:
boot on kernel on an armada375 module, connect to it, launch a top in 
commandline

As seen with Marcin Wojtas, reverting commit 
e864b4c7b184bde36fa6a02bb3190983d2f796f9 fixes this issue.

Reporting upstream so that you can decide what should be done next

Tell me if you need more information

Regards

Raphael

View attachment "regular_panic" of type "text/plain" (9007 bytes)

View attachment "series" of type "text/plain" (228 bytes)

Download attachment "patches.tgz" of type "application/x-compressed-tar" (7147 bytes)

View attachment "config" of type "text/plain" (64889 bytes)

View attachment "dumpall_kdb" of type "text/plain" (28743 bytes)