From mboxrd@z Thu Jan 1 00:00:00 1970 From: bugzilla-daemon@freedesktop.org Subject: [Bug 102322] System crashes after "[drm] IP block:gmc_v8_0 is hung!" / [drm] IP block:sdma_v3_0 is hung! Date: Wed, 11 Jul 2018 22:32:41 +0000 Message-ID: References: Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="===============0648847305==" Return-path: Received: from culpepper.freedesktop.org (culpepper.freedesktop.org [131.252.210.165]) by gabe.freedesktop.org (Postfix) with ESMTP id EC21C6EE2D for ; Wed, 11 Jul 2018 22:32:40 +0000 (UTC) In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dri-devel-bounces@lists.freedesktop.org Sender: "dri-devel" To: dri-devel@lists.freedesktop.org List-Id: dri-devel@lists.freedesktop.org --===============0648847305== Content-Type: multipart/alternative; boundary="15313483602.4f90AaA.25365" Content-Transfer-Encoding: 7bit --15313483602.4f90AaA.25365 Date: Wed, 11 Jul 2018 22:32:40 +0000 MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: http://bugs.freedesktop.org/ Auto-Submitted: auto-generated https://bugs.freedesktop.org/show_bug.cgi?id=3D102322 --- Comment #30 from dwagner --- (In reply to Andrey Grodzovsky from comment #29) > > (If that is a Mesa issue, no more than user processes / X11 should have > > crashed - but not the kernel amdgpu driver... right?) >=20 > Not exactly, MESA could create a bad request (faulty GPU address) which > would lead to this. It can even be triggered on purpose using a debug flag > from MESA. My understanding is that all parts of MESA run as user processes, outside of the kernel space. If such code is allowed to pass parameters into kernel functions that make the kernel crash, that would be a veritable security ho= le which attackers could exploit to stage at least denial-of-service attacks, = if not worse. --=20 You are receiving this mail because: You are the assignee for the bug.= --15313483602.4f90AaA.25365 Date: Wed, 11 Jul 2018 22:32:40 +0000 MIME-Version: 1.0 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: http://bugs.freedesktop.org/ Auto-Submitted: auto-generated

Comme= nt # 30 on bug 10232= 2 from dwagner 
(In reply to Andrey Grodzovsky from comment #29)
> > (If that is a Mesa issue, no more than user=
 processes / X11 should have
> > crashed - but not the kernel amdgpu driver... right?)
>=20
> Not exactly, MESA could create a bad request (faulty GPU address) which
> would lead to this. It can even be triggered on purpose using a debug =
flag
> from MESA.

My understanding is that all parts of MESA run as user processes, outside of
the kernel space. If such code is allowed to pass parameters into kernel
functions that make the kernel crash, that would be a veritable security ho=
le
which attackers could exploit to stage at least denial-of-service attacks, =
if
not worse.

You are receiving this mail because:
  • You are the assignee for the bug.
= --15313483602.4f90AaA.25365-- --===============0648847305== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KZHJpLWRldmVs IG1haWxpbmcgbGlzdApkcmktZGV2ZWxAbGlzdHMuZnJlZWRlc2t0b3Aub3JnCmh0dHBzOi8vbGlz dHMuZnJlZWRlc2t0b3Aub3JnL21haWxtYW4vbGlzdGluZm8vZHJpLWRldmVsCg== --===============0648847305==--