netdev - Re: ppp/pppoe, still panic 4.15.3 in ppp

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Wed, 14 Feb 2018 18:29:34 +0200
From:   Denys Fedoryshchenko <nuclearcat@...learcat.com>
To:     Guillaume Nault <g.nault@...halink.fr>
Cc:     Linux Kernel Network Developers <netdev@...r.kernel.org>
Subject: Re: ppp/pppoe, still panic 4.15.3 in ppp_push

On 2018-02-14 18:07, Guillaume Nault wrote:
> On Wed, Feb 14, 2018 at 03:17:23PM +0200, Denys Fedoryshchenko wrote:
>> Hi,
>> 
>> Upgraded kernel to 4.15.3, still it crashes after while (several 
>> hours,
>> cannot do bisect, as it is production server).
>> 
>> dev ppp # gdb ppp_generic.o
>> GNU gdb (Gentoo 7.12.1 vanilla) 7.12.1
>> <<skipped>>
>> Reading symbols from ppp_generic.o...done.
>> (gdb) list *ppp_push+0x73
>> 0x681 is in ppp_push (drivers/net/ppp/ppp_generic.c:1663).
>> 1658			list = list->next;
>> 1659			pch = list_entry(list, struct channel, clist);
>> 1660
>> 1661			spin_lock(&pch->downl);
>> 1662			if (pch->chan) {
>> 1663				if (pch->chan->ops->start_xmit(pch->chan, skb))
>> 1664					ppp->xmit_pending = NULL;
>> 1665			} else {
>> 1666				/* channel got unregistered */
>> 1667				kfree_skb(skb);
>> 
>> 
> I expect a memory corruption. Do you have the possibility to run with
> KASAN by any chance?
I will try to enable it tonight. For now i reverted "drivers, net, ppp: 
convert ppp_file.refcnt from atomic_t to refcount_t" for test.