From: Patrick McHardy <kaber@trash.net>
To: Herbert Xu <herbert@gondor.apana.org.au>
Cc: Greg KH <gregkh@suse.de>,
linux-kernel@vger.kernel.org, stable@kernel.org,
Justin Forbes <jmforbes@linuxtx.org>,
Zwane Mwaikambo <zwane@arm.linux.org.uk>,
"Theodore Ts'o" <tytso@mit.edu>,
Randy Dunlap <rdunlap@xenotime.net>,
Dave Jones <davej@redhat.com>,
Chuck Wolber <chuckw@quantumlinux.com>,
Chris Wedgwood <reviews@ml.cw.f00f.org>,
Michael Krufky <mkrufky@linuxtv.org>,
Chuck Ebbert <cebbert@redhat.com>,
torvalds@linux-foundation.org, akpm@linux-foundation.org,
alan@lxorguk.ukuu.org.uk,
"J. Bruce Fields" <bfields@citi.umich.edu>
Subject: Re: [patch 32/37] CRYPTO: api: scatterwalk_copychunks() fails to advance through scatterlist
Date: Sat, 31 Mar 2007 03:41:32 +0200 [thread overview]
Message-ID: <460DBC4C.1060602@trash.net> (raw)
In-Reply-To: <20070330210651.GI29450@kroah.com>
Greg KH wrote:
> -stable review patch. If anyone has any objections, please let us know.
>
> ------------------
> From: J. Bruce Fields <bfields@citi.umich.edu>
>
> [CRYPTO] api: scatterwalk_copychunks() fails to advance through scatterlist
This patch seems to cause some problems, I get reproducable freezes
on the receiving system with net-2.6.22 when sending IPsec packets
larger than the mtu (reproduced about 10 times). Reverting this
patch seems to fix it. In a few cases the oops also occured on the
sending system.
Backtrace from UML (sending system):
uml:~# ping 10.0.0.1 -s 20000
PING 10.0.0.1 (10.0.0.1) 20000(20028) bytes of data.
BUG: soft lockup detected on CPU#0!
Call Trace:
61787408: [<602b346f>] _spin_lock+0x9/0xb
61787418: [<6004f7b7>] softlockup_tick+0xa1/0xaf
61787438: [<6003c9d3>] run_local_timers+0x13/0x15
61787448: [<6003c7e8>] update_process_times+0x49/0x73
61787478: [<6001926e>] timer_handler+0x21/0x4f
617874a8: [<60029327>] sig_handler_common_skas+0xff/0x118
617874e8: [<6002625f>] real_alarm_handler+0x37/0x3b
61787508: [<600262b6>] alarm_handler+0x53/0x63
61787538: [<60027e65>] hard_handler+0x15/0x18
617875f8: [<6015bfd9>] scatterwalk_copychunks+0x6d/0xb4
617876d8: [<6001adda>] maybe_map+0x32/0x9f
61787728: [<6015d332>] blkcipher_walk_next+0x11d/0x30f
61787738: [<6006b58c>] poison_obj+0x27/0x32
61787740: [<6015d332>] blkcipher_walk_next+0x11d/0x30f
61787758: [<6006cc92>] cache_alloc_debugcheck_after+0xe5/0x12e
61787780: [<6015bfbf>] scatterwalk_copychunks+0x53/0xb4
61787788: [<6006d14e>] __kmalloc+0xb7/0xc4
617877c8: [<6015d3b6>] blkcipher_walk_next+0x1a1/0x30f
61787828: [<6015d186>] blkcipher_walk_done+0x12e/0x1bd
61787838: [<6002dae3>] aes_encrypt+0x0/0xb
61787850: [<601643d8>] xor_128+0x0/0x1c
61787878: [<6016416d>] crypto_cbc_encrypt+0x7a/0x8b
61787918: [<60244183>] esp_output+0x32b/0x44c
61787948: [<602b34dc>] _spin_unlock_bh+0x12/0x14
617879c8: [<60257051>] xfrm4_output_one+0xaa/0x16a
61787a08: [<60257234>] xfrm4_output_finish2+0x123/0x131
61787a28: [<6025728f>] xfrm4_output_finish+0x3d/0xb9
61787a58: [<60257366>] xfrm4_output+0x5b/0x5d
61787a78: [<602183a9>] ip_push_pending_frames+0x374/0x442
61787ac8: [<6023008d>] raw_sendmsg+0x2d0/0x396
61787b78: [<60237edd>] inet_sendmsg+0x46/0x53
61787ba8: [<601bb5ca>] sock_sendmsg+0xea/0x103
61787c18: [<600473b9>] autoremove_wake_function+0x0/0x39
61787c38: [<600192d3>] add_mmap+0x37/0x149
61787c98: [<6001b10d>] buffer_op+0x2e/0x5f
61787cd8: [<6001b1d5>] copy_from_user_skas+0x7a/0x7c
61787d08: [<601c2747>] verify_iovec+0x4f/0x90
61787d38: [<601bcc32>] sys_sendmsg+0x172/0x1db
61787d68: [<602b34b5>] _spin_unlock_irqrestore+0x18/0x1d
61787d88: [<601924bf>] __up_read+0x76/0x7f
61787db8: [<60049ae1>] up_read+0x9/0xb
61787dc8: [<60019d78>] handle_page_fault+0x1f4/0x224
61787e28: [<60019f29>] segv+0xa7/0x27e
61787ef8: [<6001ab91>] handle_syscall+0x65/0x80
61787f08: [<60019e7c>] segv_handler+0x68/0x6e
61787f28: [<600287ab>] handle_trap+0xd0/0xdb
61787f68: [<60028c2d>] userspace+0x139/0x181
61787fc8: [<6001a8ba>] fork_handler+0x86/0x8d
next prev parent reply other threads:[~2007-03-31 1:41 UTC|newest]
Thread overview: 63+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <20070330205938.984247529@mini.kroah.org>
2007-03-30 21:03 ` [patch 00/37] 2.6.20-stable review Greg KH
2007-03-30 21:03 ` [patch 01/37] ide: clear bmdma status in ide_intr() for ICHx controllers (revised #4) Greg KH
2007-03-30 21:03 ` [patch 02/37] ide: remove clearing bmdma status from cdrom_decode_status() (rev #4) Greg KH
2007-03-30 21:03 ` [patch 03/37] sata_nv: delay on switching between NCQ and non-NCQ commands Greg KH
2007-03-30 21:04 ` [uml-devel] [patch 04/37] UML - fix epoll Greg KH
2007-03-30 21:04 ` Greg KH
2007-03-30 21:04 ` [uml-devel] [patch 05/37] UML - host VDSO fix Greg KH
2007-03-30 21:04 ` Greg KH
2007-03-30 21:04 ` [uml-devel] [patch 06/37] UML - Fix static linking Greg KH
2007-03-30 21:04 ` Greg KH
2007-03-30 21:04 ` [uml-devel] " Greg KH
2007-03-30 21:04 ` Greg KH
2007-03-31 1:21 ` [uml-devel] " Blaisorblade
2007-03-31 1:21 ` Blaisorblade
2007-03-30 21:04 ` [uml-devel] [patch 07/37] UML - use correct register file size everywhere Greg KH
2007-03-30 21:04 ` Greg KH
2007-03-30 21:04 ` [patch 08/37] uml: fix unreasonably long udelay Greg KH
2007-03-30 21:04 ` [patch 09/37] ieee1394: dv1394: fix CardBus card ejection Greg KH
2007-03-30 21:04 ` [patch 10/37] NET: Fix packet classidier NULL pointer OOPS Greg KH
2007-03-30 21:04 ` [patch 11/37] NET_SCHED: Fix ingress qdisc locking Greg KH
2007-03-30 21:04 ` [patch 12/37] IPV6: Fix ipv6 round-robin locking Greg KH
2007-03-30 21:04 ` [patch 13/37] PPP: Fix PPP skb leak Greg KH
2007-03-30 21:04 ` [patch 14/37] DCCP: Fix exploitable hole in DCCP socket options Greg KH
2007-03-30 21:04 ` [patch 15/37] VIDEO: Fix FFB DAC revision probing Greg KH
2007-03-30 21:04 ` [patch 16/37] NET: Fix sock_attach_fd() failure in sys_accept() Greg KH
2007-03-30 21:04 ` Greg KH
2007-03-30 21:04 ` [patch 17/37] SPARC: Fix sparc builds with gcc-4.2.x Greg KH
2007-03-30 21:05 ` [patch 18/37] Fix decnet endianness Greg KH
2007-03-30 21:05 ` [patch 19/37] NET: Fix FIB rules compatability Greg KH
2007-03-30 21:05 ` [patch 20/37] DVB: fix nxt200x rf input switching Greg KH
2007-03-30 21:05 ` [patch 21/37] V4L: radio: Fix error in Kbuild file Greg KH
2007-03-30 21:05 ` [patch 22/37] V4L: Fix SECAM handling on saa7115 Greg KH
2007-03-30 21:06 ` [patch 23/37] V4L: msp_attach must return 0 if no msp3400 was found Greg KH
2007-03-30 21:06 ` [patch 24/37] DVB: isl6421: dont reference freed memory Greg KH
2007-03-30 21:06 ` [patch 25/37] dvb-core: fix several locking related problems Greg KH
2007-03-30 21:06 ` [patch 26/37] V4L: saa7146: Fix allocation of clipping memory Greg KH
2007-03-30 21:06 ` [patch 27/37] jmicron: make ide jmicron driver play nice with libata ones Greg KH
2007-03-30 21:06 ` [patch 28/37] i2o: block IO errors on i2o disk Greg KH
2007-03-30 21:06 ` [patch 29/37] ide: revert "ide: fix drive side 80c cable check, take 2" for now Greg KH
2007-03-30 21:06 ` [patch 30/37] CIFS: Allow reset of file to ATTR_NORMAL when archive bit not set Greg KH
2007-03-30 21:06 ` [patch 31/37] CIFS: reset mode when client notices that ATTR_READONLY is no longer set Greg KH
2007-03-30 21:06 ` [patch 32/37] CRYPTO: api: scatterwalk_copychunks() fails to advance through scatterlist Greg KH
2007-03-31 1:41 ` Patrick McHardy [this message]
2007-03-31 2:14 ` Herbert Xu
2007-03-31 2:31 ` Patrick McHardy
2007-03-31 3:11 ` Greg KH
2007-03-31 3:45 ` Herbert Xu
2007-03-31 21:35 ` J. Bruce Fields
2007-03-30 21:06 ` [patch 33/37] libata: clear TF before IDENTIFYing Greg KH
2007-03-30 21:06 ` [patch 34/37] libata bugfix: HDIO_DRIVE_TASK Greg KH
2007-03-30 21:42 ` Mark Lord
2007-03-30 21:59 ` Greg KH
2007-03-30 21:45 ` libata bugfix: preserve LBA bit for HDIO_DRIVE_TASK Mark Lord
2007-03-31 3:36 ` Tejun Heo
2007-03-31 16:55 ` Mark Lord
2007-03-31 17:05 ` Tejun Heo
2007-04-04 6:08 ` Jeff Garzik
2007-03-30 21:07 ` [patch 35/37] libata: sata_mv: dont touch reserved bits in EDMA config register Greg KH
2007-03-30 21:07 ` [patch 36/37] libata: sata_mv: Fix 50xx irq mask Greg KH
2007-03-30 21:07 ` [patch 37/37] generic_serial: fix decoding of baud rate Greg KH
2007-03-30 21:10 ` [patch 00/37] 2.6.20-stable review Greg KH
2007-04-04 14:28 ` Chuck Ebbert
2007-04-04 21:23 ` [stable] " Greg KH
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=460DBC4C.1060602@trash.net \
--to=kaber@trash.net \
--cc=akpm@linux-foundation.org \
--cc=alan@lxorguk.ukuu.org.uk \
--cc=bfields@citi.umich.edu \
--cc=cebbert@redhat.com \
--cc=chuckw@quantumlinux.com \
--cc=davej@redhat.com \
--cc=gregkh@suse.de \
--cc=herbert@gondor.apana.org.au \
--cc=jmforbes@linuxtx.org \
--cc=linux-kernel@vger.kernel.org \
--cc=mkrufky@linuxtv.org \
--cc=rdunlap@xenotime.net \
--cc=reviews@ml.cw.f00f.org \
--cc=stable@kernel.org \
--cc=torvalds@linux-foundation.org \
--cc=tytso@mit.edu \
--cc=zwane@arm.linux.org.uk \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.