From: Bastian Blank <waldi@debian.org>
To: xen-devel@lists.xensource.com
Cc: Jeremy Fitzhardinge <jeremy@goop.org>
Subject: Null-pointer access in netback_uevent
Date: Thu, 27 May 2010 18:55:58 +0200 [thread overview]
Message-ID: <20100527165558.GA11358@wavehammer.waldi.eu.org> (raw)
My slightly patched kernel based on
f6fe6583b77a49b569eef1b66c3d761eec2e561b failed with null-pointer access in
netback_uevent.
| BUG: unable to handle kernel NULL pointer dereference at 0000000000000150
| IP: [<ffffffff812017a3>] netback_uevent+0x83/0xaf
According to gdb the following is the culprit:
| 185 if (add_uevent_var(env, "vif=%s", netif->dev->name))
| 0x0000000000002313 <+131>: mov 0x150(%r13),%rdx
Complete oops:
| BUG: unable to handle kernel NULL pointer dereference at 0000000000000150
| IP: [<ffffffff812017a3>] netback_uevent+0x83/0xaf
| PGD ce0b1067 PUD ce193067 PMD 0
| Oops: 0000 [#1] SMP
| last sysfs file: /sys/devices/vif-1-0/uevent
| CPU 1
| Modules linked in: blktap xen_evtchn xenfs xt_tcpudp xt_state iptable_filter ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ipv4 nf_conntrack nf_defrag_ipv4 ip_tables x_tables bridge stp dm_snapshot loop snd_pcm snd_timer snd soundcore tpm_tis radeon snd_page_alloc ttm drm_kms_helper psmouse tpm drm pcspkr amd64_edac_mod ipmi_si tpm_bios evdev serio_raw edac_core i2c_algo_bit shpchp ipmi_msghandler i2c_piix4 edac_mce_amd container i2c_core hpilo processor pci_hotplug button acpi_processor hpwdt ext3 jbd mbcache dm_mod cciss ata_generic libata scsi_mod bnx2 thermal thermal_sys [last unloaded: xen_evtchn]
| Pid: 8076, comm: udevd Tainted: G W 2.6.32-5-xen-amd64 #2 ProLiant DL385 G6
| RIP: e030:[<ffffffff812017a3>] [<ffffffff812017a3>] netback_uevent+0x83/0xaf
| RSP: e02b:ffff880002af7e18 EFLAGS: 00010246
| RAX: 01000000000000c1 RBX: ffff8800029f6000 RCX: 0000000000800078
| RDX: ffff8800c33b13a0 RSI: ffffea0002ab4eb8 RDI: 01000000000002c0
| RBP: ffff8800c33b14e0 R08: 0000000000000000 R09: ffffffff814664f0
| R10: 0000000000000200 R11: ffffffff8100f19c R12: ffff880002f39c00
| R13: 0000000000000000 R14: ffff8800021db000 R15: ffff8800c5026980
| FS: 00007fbd86ad2790(0000) GS:ffff880003a64000(0000) knlGS:0000000000000000
| CS: e033 DS: 0000 ES: 0000 CR0: 000000008005003b
| CR2: 0000000000000150 CR3: 00000000025f4000 CR4: 0000000000000660
| DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
| DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
| Process udevd (pid: 8076, threadinfo ffff880002af6000, task ffff88000246c6a0)
| Stack:
| 0000000000000908 ffff880002f39c40 ffff8800029f6000 ffff8800c3795c30
| ffff8800029f6000 ffffffff8122d9f6 ffff880002f39c50 ffff8800c3795c30
| ffffffff814a80d0 0000000000000000 ffff880002f39c50 ffffffff8122db35
| Call Trace:
| [<ffffffff8122d9f6>] ? dev_uevent+0x104/0x146
| [<ffffffff8122db35>] ? show_uevent+0x81/0xd5
| [<ffffffff8122d6da>] ? dev_attr_show+0x1f/0x42
| [<ffffffff8114074f>] ? sysfs_read_file+0xa7/0x125
| [<ffffffff810f0a6e>] ? vfs_read+0xa6/0xff
| [<ffffffff810f0b83>] ? sys_read+0x45/0x6e
| [<ffffffff81011b42>] ? system_call_fastpath+0x16/0x1b
| Code: c7 c6 fe 1c 3f 81 31 c0 48 89 df e8 44 fe f8 ff 85 c0 74 0f 48 89 ef bb f4 ff ff ff e8 39 70 ee ff eb 2a 48 89 ef e8 2f 70 ee ff <49> 8b 95 50 01 00 00 48 89 df 31 c0 48 c7 c6 08 1d 3f 81 e8 11
| RIP [<ffffffff812017a3>] netback_uevent+0x83/0xaf
| RSP <ffff880002af7e18>
| CR2: 0000000000000150
| ---[ end trace a7919e7f17c0a727 ]---
Bastian
--
Men will always be men -- no matter where they are.
-- Harry Mudd, "Mudd's Women", stardate 1329.8
next reply other threads:[~2010-05-27 16:55 UTC|newest]
Thread overview: 25+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-05-27 16:55 Bastian Blank [this message]
2010-05-27 21:03 ` Null-pointer access in netback_uevent Jeremy Fitzhardinge
2010-05-27 22:27 ` Bastian Blank
2010-05-27 22:39 ` Jeremy Fitzhardinge
2010-05-27 23:02 ` Bastian Blank
2010-05-28 0:04 ` James Harper
2010-05-28 0:33 ` James Harper
2010-05-28 0:47 ` James Harper
2010-05-28 9:03 ` Bastian Blank
2010-05-28 17:28 ` Jeremy Fitzhardinge
2010-05-28 22:42 ` James Harper
2010-05-28 23:30 ` Jeremy Fitzhardinge
2010-05-28 23:59 ` James Harper
2010-05-29 6:44 ` Bastian Blank
2010-05-29 18:44 ` [PATCH] xen/netback: Fix null-pointer " Bastian Blank
2010-05-31 7:37 ` Jan Beulich
2010-05-31 8:07 ` Jan Beulich
2010-07-28 16:20 ` Bastian Blank
2010-07-29 11:47 ` Ian Campbell
2010-07-29 12:42 ` Bastian Blank
2010-07-29 13:44 ` Ian Campbell
2010-07-29 13:48 ` Ian Campbell
2010-07-29 15:30 ` Bastian Blank
2010-07-29 15:40 ` Jeremy Fitzhardinge
2010-07-29 17:08 ` Bastian Blank
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20100527165558.GA11358@wavehammer.waldi.eu.org \
--to=waldi@debian.org \
--cc=jeremy@goop.org \
--cc=xen-devel@lists.xensource.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).