From: "Toralf Förster" <toralf.foerster@gmx.de>
To: kvm@vger.kernel.org, pageexec@freemail.hu
Cc: Linux Kernel <linux-kernel@vger.kernel.org>
Subject: PAX: size overflow detected in function __vhost_add_used_n drivers/vhost/vhost.c:1517
Date: Sat, 5 Dec 2015 20:51:13 +0100 [thread overview]
Message-ID: <56634031.5030208@gmx.de> (raw)
run into the following at a 64bit hardened stable Gentoo Linux while running the following command at the host (probably just the ssh login was it yet) :
$ cd ~/devel/linux/; git archive --prefix linux-4.4.x/ v4.4-rc3 | (ssh root@n22kvm "cd /usr/src/; sudo tar -xf-")
Dec 5 20:39:26 t44 kernel: PAX: size overflow detected in function __vhost_add_used_n drivers/vhost/vhost.c:1517 cicus.491_193 max, count: 7, decl: last_used_idx; num: 0; context: vhost_virtqueue;
Dec 5 20:39:26 t44 kernel: CPU: 2 PID: 3708 Comm: vhost-3706 Tainted: G W 4.2.6-hardened-r7 #2
Dec 5 20:39:26 t44 kernel: Hardware name: LENOVO 20AQCTO1WW/20AQCTO1WW, BIOS GJET83WW (2.33 ) 03/09/2015
Dec 5 20:39:26 t44 kernel: ffffffffc096fe5a 0000000000000000 ffffffffc096fddc ffffc9000043bb78
Dec 5 20:39:26 t44 kernel: ffffffff815ef500 ffff88033e30eec8 ffffffffc096fe5a ffffc9000043bba8
Dec 5 20:39:26 t44 kernel: ffffffff811ae28b 000000000000fffb ffff880326d300a0 0000000000000005
Dec 5 20:39:26 t44 kernel: Call Trace:
Dec 5 20:39:26 t44 kernel: [<ffffffffc096fe5a>] ? __param_str_max_mem_regions+0x9a/0xae8 [vhost]
Dec 5 20:39:26 t44 kernel: [<ffffffffc096fddc>] ? __param_str_max_mem_regions+0x1c/0xae8 [vhost]
Dec 5 20:39:26 t44 kernel: [<ffffffff815ef500>] dump_stack+0x45/0x5d
Dec 5 20:39:26 t44 kernel: [<ffffffffc096fe5a>] ? __param_str_max_mem_regions+0x9a/0xae8 [vhost]
Dec 5 20:39:26 t44 kernel: [<ffffffff811ae28b>] report_size_overflow+0x3b/0x50
Dec 5 20:39:26 t44 kernel: [<ffffffffc096da7b>] __vhost_add_used_n+0x1db/0x1e0 [vhost]
Dec 5 20:39:26 t44 kernel: [<ffffffff8137a0e6>] ? copy_user_enhanced_fast_string+0x16/0x20
Dec 5 20:39:26 t44 kernel: [<ffffffffc096e0e2>] vhost_add_used_n+0x92/0x1b0 [vhost]
Dec 5 20:39:26 t44 kernel: [<ffffffffc096eb7a>] vhost_add_used_and_signal_n+0x2a/0x50 [vhost]
Dec 5 20:39:26 t44 kernel: [<ffffffffc097bd1b>] handle_rx+0x63b/0x910 [vhost_net]
Dec 5 20:39:26 t44 kernel: [<ffffffffc097c00d>] handle_rx_net+0x1d/0x30 [vhost_net]
Dec 5 20:39:26 t44 kernel: [<ffffffffc096d7f8>] vhost_worker+0xf8/0x1a0 [vhost]
Dec 5 20:39:26 t44 kernel: [<ffffffffc096d700>] ? vhost_log_write+0xa0/0xa0 [vhost]
Dec 5 20:39:26 t44 kernel: [<ffffffff81085877>] kthread+0xf7/0x110
Dec 5 20:39:26 t44 kernel: [<ffffffff81085780>] ? kthread_create_on_node+0x1b0/0x1b0
Dec 5 20:39:26 t44 kernel: [<ffffffff815f690e>] ret_from_fork+0x3e/0x70
Dec 5 20:39:26 t44 kernel: [<ffffffff81085780>] ? kthread_create_on_node+0x1b0/0x1b0
--
Toralf, pgp: C4EACDDE 0076E94E
next reply other threads:[~2015-12-05 19:51 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-12-05 19:51 Toralf Förster [this message]
2015-12-05 20:26 ` PAX: size overflow detected in function __vhost_add_used_n drivers/vhost/vhost.c:1517 PaX Team
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=56634031.5030208@gmx.de \
--to=toralf.foerster@gmx.de \
--cc=kvm@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=pageexec@freemail.hu \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox