From: Patrick McHardy <kaber@trash.net>
To: Herbert Xu <herbert@gondor.apana.org.au>
Cc: Greg KH <gregkh@suse.de>,
linux-kernel@vger.kernel.org, stable@kernel.org,
Justin Forbes <jmforbes@linuxtx.org>,
Zwane Mwaikambo <zwane@arm.linux.org.uk>,
"Theodore Ts'o" <tytso@mit.edu>,
Randy Dunlap <rdunlap@xenotime.net>,
Dave Jones <davej@redhat.com>,
Chuck Wolber <chuckw@quantumlinux.com>,
Chris Wedgwood <reviews@ml.cw.f00f.org>,
Michael Krufky <mkrufky@linuxtv.org>,
Chuck Ebbert <cebbert@redhat.com>,
torvalds@linux-foundation.org, akpm@linux-foundation.org,
alan@lxorguk.ukuu.org.uk,
"J. Bruce Fields" <bfields@citi.umich.edu>
Subject: Re: [patch 32/37] CRYPTO: api: scatterwalk_copychunks() fails to advance through scatterlist
Date: Sat, 31 Mar 2007 03:41:32 +0200 [thread overview]
Message-ID: <460DBC4C.1060602@trash.net> (raw)
In-Reply-To: <20070330210651.GI29450@kroah.com>
Greg KH wrote:
> -stable review patch. If anyone has any objections, please let us know.
>
> ------------------
> From: J. Bruce Fields <bfields@citi.umich.edu>
>
> [CRYPTO] api: scatterwalk_copychunks() fails to advance through scatterlist
This patch seems to cause some problems, I get reproducable freezes
on the receiving system with net-2.6.22 when sending IPsec packets
larger than the mtu (reproduced about 10 times). Reverting this
patch seems to fix it. In a few cases the oops also occured on the
sending system.
Backtrace from UML (sending system):
uml:~# ping 10.0.0.1 -s 20000
PING 10.0.0.1 (10.0.0.1) 20000(20028) bytes of data.
BUG: soft lockup detected on CPU#0!
Call Trace:
61787408: [<602b346f>] _spin_lock+0x9/0xb
61787418: [<6004f7b7>] softlockup_tick+0xa1/0xaf
61787438: [<6003c9d3>] run_local_timers+0x13/0x15
61787448: [<6003c7e8>] update_process_times+0x49/0x73
61787478: [<6001926e>] timer_handler+0x21/0x4f
617874a8: [<60029327>] sig_handler_common_skas+0xff/0x118
617874e8: [<6002625f>] real_alarm_handler+0x37/0x3b
61787508: [<600262b6>] alarm_handler+0x53/0x63
61787538: [<60027e65>] hard_handler+0x15/0x18
617875f8: [<6015bfd9>] scatterwalk_copychunks+0x6d/0xb4
617876d8: [<6001adda>] maybe_map+0x32/0x9f
61787728: [<6015d332>] blkcipher_walk_next+0x11d/0x30f
61787738: [<6006b58c>] poison_obj+0x27/0x32
61787740: [<6015d332>] blkcipher_walk_next+0x11d/0x30f
61787758: [<6006cc92>] cache_alloc_debugcheck_after+0xe5/0x12e
61787780: [<6015bfbf>] scatterwalk_copychunks+0x53/0xb4
61787788: [<6006d14e>] __kmalloc+0xb7/0xc4
617877c8: [<6015d3b6>] blkcipher_walk_next+0x1a1/0x30f
61787828: [<6015d186>] blkcipher_walk_done+0x12e/0x1bd
61787838: [<6002dae3>] aes_encrypt+0x0/0xb
61787850: [<601643d8>] xor_128+0x0/0x1c
61787878: [<6016416d>] crypto_cbc_encrypt+0x7a/0x8b
61787918: [<60244183>] esp_output+0x32b/0x44c
61787948: [<602b34dc>] _spin_unlock_bh+0x12/0x14
617879c8: [<60257051>] xfrm4_output_one+0xaa/0x16a
61787a08: [<60257234>] xfrm4_output_finish2+0x123/0x131
61787a28: [<6025728f>] xfrm4_output_finish+0x3d/0xb9
61787a58: [<60257366>] xfrm4_output+0x5b/0x5d
61787a78: [<602183a9>] ip_push_pending_frames+0x374/0x442
61787ac8: [<6023008d>] raw_sendmsg+0x2d0/0x396
61787b78: [<60237edd>] inet_sendmsg+0x46/0x53
61787ba8: [<601bb5ca>] sock_sendmsg+0xea/0x103
61787c18: [<600473b9>] autoremove_wake_function+0x0/0x39
61787c38: [<600192d3>] add_mmap+0x37/0x149
61787c98: [<6001b10d>] buffer_op+0x2e/0x5f
61787cd8: [<6001b1d5>] copy_from_user_skas+0x7a/0x7c
61787d08: [<601c2747>] verify_iovec+0x4f/0x90
61787d38: [<601bcc32>] sys_sendmsg+0x172/0x1db
61787d68: [<602b34b5>] _spin_unlock_irqrestore+0x18/0x1d
61787d88: [<601924bf>] __up_read+0x76/0x7f
61787db8: [<60049ae1>] up_read+0x9/0xb
61787dc8: [<60019d78>] handle_page_fault+0x1f4/0x224
61787e28: [<60019f29>] segv+0xa7/0x27e
61787ef8: [<6001ab91>] handle_syscall+0x65/0x80
61787f08: [<60019e7c>] segv_handler+0x68/0x6e
61787f28: [<600287ab>] handle_trap+0xd0/0xdb
61787f68: [<60028c2d>] userspace+0x139/0x181
61787fc8: [<6001a8ba>] fork_handler+0x86/0x8d
next prev parent reply other threads:[~2007-03-31 1:41 UTC|newest]
Thread overview: 57+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <20070330205938.984247529@mini.kroah.org>
2007-03-30 21:03 ` [patch 00/37] 2.6.20-stable review Greg KH
2007-03-30 21:03 ` [patch 01/37] ide: clear bmdma status in ide_intr() for ICHx controllers (revised #4) Greg KH
2007-03-30 21:03 ` [patch 02/37] ide: remove clearing bmdma status from cdrom_decode_status() (rev #4) Greg KH
2007-03-30 21:03 ` [patch 03/37] sata_nv: delay on switching between NCQ and non-NCQ commands Greg KH
2007-03-30 21:04 ` [patch 04/37] UML - fix epoll Greg KH
2007-03-30 21:04 ` [patch 05/37] UML - host VDSO fix Greg KH
2007-03-30 21:04 ` [patch 06/37] UML - Fix static linking Greg KH
2007-03-30 21:04 ` Greg KH
2007-03-31 1:21 ` [uml-devel] " Blaisorblade
2007-03-30 21:04 ` [patch 07/37] UML - use correct register file size everywhere Greg KH
2007-03-30 21:04 ` [patch 08/37] uml: fix unreasonably long udelay Greg KH
2007-03-30 21:04 ` [patch 09/37] ieee1394: dv1394: fix CardBus card ejection Greg KH
2007-03-30 21:04 ` [patch 10/37] NET: Fix packet classidier NULL pointer OOPS Greg KH
2007-03-30 21:04 ` [patch 11/37] NET_SCHED: Fix ingress qdisc locking Greg KH
2007-03-30 21:04 ` [patch 12/37] IPV6: Fix ipv6 round-robin locking Greg KH
2007-03-30 21:04 ` [patch 13/37] PPP: Fix PPP skb leak Greg KH
2007-03-30 21:04 ` [patch 14/37] DCCP: Fix exploitable hole in DCCP socket options Greg KH
2007-03-30 21:04 ` [patch 15/37] VIDEO: Fix FFB DAC revision probing Greg KH
2007-03-30 21:04 ` [patch 16/37] NET: Fix sock_attach_fd() failure in sys_accept() Greg KH
2007-03-30 21:04 ` Greg KH
2007-03-30 21:04 ` [patch 17/37] SPARC: Fix sparc builds with gcc-4.2.x Greg KH
2007-03-30 21:05 ` [patch 18/37] Fix decnet endianness Greg KH
2007-03-30 21:05 ` [patch 19/37] NET: Fix FIB rules compatability Greg KH
2007-03-30 21:05 ` [patch 20/37] DVB: fix nxt200x rf input switching Greg KH
2007-03-30 21:05 ` [patch 21/37] V4L: radio: Fix error in Kbuild file Greg KH
2007-03-30 21:05 ` [patch 22/37] V4L: Fix SECAM handling on saa7115 Greg KH
2007-03-30 21:06 ` [patch 23/37] V4L: msp_attach must return 0 if no msp3400 was found Greg KH
2007-03-30 21:06 ` [patch 24/37] DVB: isl6421: dont reference freed memory Greg KH
2007-03-30 21:06 ` [patch 25/37] dvb-core: fix several locking related problems Greg KH
2007-03-30 21:06 ` [patch 26/37] V4L: saa7146: Fix allocation of clipping memory Greg KH
2007-03-30 21:06 ` [patch 27/37] jmicron: make ide jmicron driver play nice with libata ones Greg KH
2007-03-30 21:06 ` [patch 28/37] i2o: block IO errors on i2o disk Greg KH
2007-03-30 21:06 ` [patch 29/37] ide: revert "ide: fix drive side 80c cable check, take 2" for now Greg KH
2007-03-30 21:06 ` [patch 30/37] CIFS: Allow reset of file to ATTR_NORMAL when archive bit not set Greg KH
2007-03-30 21:06 ` [patch 31/37] CIFS: reset mode when client notices that ATTR_READONLY is no longer set Greg KH
2007-03-30 21:06 ` [patch 32/37] CRYPTO: api: scatterwalk_copychunks() fails to advance through scatterlist Greg KH
2007-03-31 1:41 ` Patrick McHardy [this message]
2007-03-31 2:14 ` Herbert Xu
2007-03-31 2:31 ` Patrick McHardy
2007-03-31 3:11 ` Greg KH
2007-03-31 3:45 ` Herbert Xu
2007-03-31 21:35 ` J. Bruce Fields
2007-03-30 21:06 ` [patch 33/37] libata: clear TF before IDENTIFYing Greg KH
2007-03-30 21:06 ` [patch 34/37] libata bugfix: HDIO_DRIVE_TASK Greg KH
2007-03-30 21:42 ` Mark Lord
2007-03-30 21:59 ` Greg KH
2007-03-30 21:45 ` libata bugfix: preserve LBA bit for HDIO_DRIVE_TASK Mark Lord
2007-03-31 3:36 ` Tejun Heo
2007-03-31 16:55 ` Mark Lord
2007-03-31 17:05 ` Tejun Heo
2007-04-04 6:08 ` Jeff Garzik
2007-03-30 21:07 ` [patch 35/37] libata: sata_mv: dont touch reserved bits in EDMA config register Greg KH
2007-03-30 21:07 ` [patch 36/37] libata: sata_mv: Fix 50xx irq mask Greg KH
2007-03-30 21:07 ` [patch 37/37] generic_serial: fix decoding of baud rate Greg KH
2007-03-30 21:10 ` [patch 00/37] 2.6.20-stable review Greg KH
2007-04-04 14:28 ` Chuck Ebbert
2007-04-04 21:23 ` [stable] " Greg KH
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=460DBC4C.1060602@trash.net \
--to=kaber@trash.net \
--cc=akpm@linux-foundation.org \
--cc=alan@lxorguk.ukuu.org.uk \
--cc=bfields@citi.umich.edu \
--cc=cebbert@redhat.com \
--cc=chuckw@quantumlinux.com \
--cc=davej@redhat.com \
--cc=gregkh@suse.de \
--cc=herbert@gondor.apana.org.au \
--cc=jmforbes@linuxtx.org \
--cc=linux-kernel@vger.kernel.org \
--cc=mkrufky@linuxtv.org \
--cc=rdunlap@xenotime.net \
--cc=reviews@ml.cw.f00f.org \
--cc=stable@kernel.org \
--cc=torvalds@linux-foundation.org \
--cc=tytso@mit.edu \
--cc=zwane@arm.linux.org.uk \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox