From: Pavel Machek <pavel@ucw.cz>
To: pali.rohar@gmail.com, sre@kernel.org,
"kernel list" <linux-kernel@vger.kernel.org>,
linux-arm-kernel <linux-arm-kernel@lists.infradead.org>,
linux-omap@vger.kernel.org, tony@atomide.com, khilman@kernel.org,
aaro.koskinen@iki.fi, ivo.g.dimitrov.75@gmail.com,
patrikbachan@gmail.com, serge@hallyn.com, abcloriens@gmail.com,
clayton@craftyguy.net, martijn@brixit.nl,
sakari.ailus@linux.intel.com,
"Filip Matijević" <filip.matijevic.pz@gmail.com>
Subject: Nokia N900: insecure W+X mapping at 0xd0050000
Date: Thu, 8 Mar 2018 15:28:18 +0100 [thread overview]
Message-ID: <20180308142818.GA9439@amd> (raw)
[-- Attachment #1: Type: text/plain, Size: 2448 bytes --]
Hi!
Insecure W+X mappings, who cares about those? I have 7 pages...
Pavel
[ 0.000000] Booting Linux on physical CPU 0x0
[ 0.000000] Linux version 4.16.0-rc3-next-20180302 (pavel@duo) (gcc
version 4.7.2 (GC
C)) #70 Fri Mar 2 10:16:00 CET 2018
[ 0.000000] CPU: ARMv7 Processor [411fc083] revision 3 (ARMv7),
cr=10c5387d
[ 0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT
nonaliasing instruction cac
...
[ 1.266693] ------------[ cut here ]------------
[ 1.271606] WARNING: CPU: 0 PID: 1 at lib/refcount.c:187
refcount_sub_and_test+0x94/0xa8
[ 1.280181] refcount_t: underflow; use-after-free.
[ 1.285247] Modules linked in:
...
[ 4.557220] devtmpfs: mounted
[ 4.569610] Freeing unused kernel memory: 1024K
[ 4.581481] ------------[ cut here ]------------
[ 4.592376] WARNING: CPU: 0 PID: 1 at arch/arm/mm/dump.c:253
note_page+0x2f8/0x328
[ 4.606658] arm/mm: Found insecure W+X mapping at address
0xd0050000
[ 4.619781] Modules linked in:
[ 4.629272] CPU: 0 PID: 1 Comm: swapper Tainted: G W
4.16.0-rc3-next-20180302 #70
[ 4.645111] Hardware name: Nokia RX-51 board
[ 4.655944] [<c010d6cc>] (unwind_backtrace) from [<c010b560>]
(show_stack+0x10/0x14)
[ 4.670593] [<c010b560>] (show_stack) from [<c0127dec>]
(__warn+0xe8/0x110)
[ 4.684295] [<c0127dec>] (__warn) from [<c0127edc>]
(warn_slowpath_fmt+0x38/0x48)
[ 4.698455] [<c0127edc>] (warn_slowpath_fmt) from [<c0113aa8>]
(note_page+0x2f8/0x328)
[ 4.713134] [<c0113aa8>] (note_page) from [<c0113b60>]
(walk_pgd+0x88/0x178)
[ 4.726837] [<c0113b60>] (walk_pgd) from [<c0113d28>]
(ptdump_check_wx+0x64/0xb8)
[ 4.741210] [<c0113d28>] (ptdump_check_wx) from [<c0716428>]
(kernel_init+0x24/0x108)
[ 4.755859] [<c0716428>] (kernel_init) from [<c01010e8>]
(ret_from_fork+0x14/0x2c)
[ 4.770294] Exception stack(0xce049fb0 to 0xce049ff8)
[ 4.781921] 9fa0: 00000000
00000000 00000000 00000000
[ 4.796966] 9fc0: 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000
[ 4.812011] 9fe0: 00000000 00000000 00000000 00000000 00000013
00000000
[ 4.825378] ---[ end trace dcb3a72772bbfe7c ]---
[ 4.837005] Checked W+X mappings: FAILED, 7 W+X pages found
--
(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html
[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 181 bytes --]
WARNING: multiple messages have this Message-ID (diff)
From: pavel@ucw.cz (Pavel Machek)
To: linux-arm-kernel@lists.infradead.org
Subject: Nokia N900: insecure W+X mapping at 0xd0050000
Date: Thu, 8 Mar 2018 15:28:18 +0100 [thread overview]
Message-ID: <20180308142818.GA9439@amd> (raw)
Hi!
Insecure W+X mappings, who cares about those? I have 7 pages...
Pavel
[ 0.000000] Booting Linux on physical CPU 0x0
[ 0.000000] Linux version 4.16.0-rc3-next-20180302 (pavel at duo) (gcc
version 4.7.2 (GC
C)) #70 Fri Mar 2 10:16:00 CET 2018
[ 0.000000] CPU: ARMv7 Processor [411fc083] revision 3 (ARMv7),
cr=10c5387d
[ 0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT
nonaliasing instruction cac
...
[ 1.266693] ------------[ cut here ]------------
[ 1.271606] WARNING: CPU: 0 PID: 1 at lib/refcount.c:187
refcount_sub_and_test+0x94/0xa8
[ 1.280181] refcount_t: underflow; use-after-free.
[ 1.285247] Modules linked in:
...
[ 4.557220] devtmpfs: mounted
[ 4.569610] Freeing unused kernel memory: 1024K
[ 4.581481] ------------[ cut here ]------------
[ 4.592376] WARNING: CPU: 0 PID: 1 at arch/arm/mm/dump.c:253
note_page+0x2f8/0x328
[ 4.606658] arm/mm: Found insecure W+X mapping at address
0xd0050000
[ 4.619781] Modules linked in:
[ 4.629272] CPU: 0 PID: 1 Comm: swapper Tainted: G W
4.16.0-rc3-next-20180302 #70
[ 4.645111] Hardware name: Nokia RX-51 board
[ 4.655944] [<c010d6cc>] (unwind_backtrace) from [<c010b560>]
(show_stack+0x10/0x14)
[ 4.670593] [<c010b560>] (show_stack) from [<c0127dec>]
(__warn+0xe8/0x110)
[ 4.684295] [<c0127dec>] (__warn) from [<c0127edc>]
(warn_slowpath_fmt+0x38/0x48)
[ 4.698455] [<c0127edc>] (warn_slowpath_fmt) from [<c0113aa8>]
(note_page+0x2f8/0x328)
[ 4.713134] [<c0113aa8>] (note_page) from [<c0113b60>]
(walk_pgd+0x88/0x178)
[ 4.726837] [<c0113b60>] (walk_pgd) from [<c0113d28>]
(ptdump_check_wx+0x64/0xb8)
[ 4.741210] [<c0113d28>] (ptdump_check_wx) from [<c0716428>]
(kernel_init+0x24/0x108)
[ 4.755859] [<c0716428>] (kernel_init) from [<c01010e8>]
(ret_from_fork+0x14/0x2c)
[ 4.770294] Exception stack(0xce049fb0 to 0xce049ff8)
[ 4.781921] 9fa0: 00000000
00000000 00000000 00000000
[ 4.796966] 9fc0: 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000
[ 4.812011] 9fe0: 00000000 00000000 00000000 00000000 00000013
00000000
[ 4.825378] ---[ end trace dcb3a72772bbfe7c ]---
[ 4.837005] Checked W+X mappings: FAILED, 7 W+X pages found
--
(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: Digital signature
URL: <http://lists.infradead.org/pipermail/linux-arm-kernel/attachments/20180308/ef9e20dd/attachment.sig>
next reply other threads:[~2018-03-08 14:28 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-03-08 14:28 Pavel Machek [this message]
2018-03-08 14:28 ` Nokia N900: insecure W+X mapping at 0xd0050000 Pavel Machek
2018-03-08 16:24 ` Tony Lindgren
2018-03-08 16:24 ` Tony Lindgren
2018-03-08 16:46 ` Tony Lindgren
2018-03-08 16:46 ` Tony Lindgren
2018-03-08 18:05 ` Pavel Machek
2018-03-08 18:05 ` Pavel Machek
2018-03-21 15:24 ` Tony Lindgren
2018-03-21 15:24 ` Tony Lindgren
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20180308142818.GA9439@amd \
--to=pavel@ucw.cz \
--cc=aaro.koskinen@iki.fi \
--cc=abcloriens@gmail.com \
--cc=clayton@craftyguy.net \
--cc=filip.matijevic.pz@gmail.com \
--cc=ivo.g.dimitrov.75@gmail.com \
--cc=khilman@kernel.org \
--cc=linux-arm-kernel@lists.infradead.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-omap@vger.kernel.org \
--cc=martijn@brixit.nl \
--cc=pali.rohar@gmail.com \
--cc=patrikbachan@gmail.com \
--cc=sakari.ailus@linux.intel.com \
--cc=serge@hallyn.com \
--cc=sre@kernel.org \
--cc=tony@atomide.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.