[rsbac] my 2.4.32pre2 +rsbac oops

Bencsath Boldizsar boldi at datacontact.hu
Fri Aug 19 01:03:18 CEST 2005


On one of my computers I found ls -la /usr/lib/ gives oops/segmentation
fault.

the kernel is my 2.4.32pre2+rsbac 1.2.4+fixes+grsec

It can be traced back to lstat64. As the hang is possibly related to
rsbac, here is a dump

le kernel paging request at virtual address 6f730069
c01710ec
*pgd = 0000000000000000
Oops: 0000
CPU:    0
EIP:    0010:[<c01710ec>]    Not tainted
Using defaults from ksymoops -t elf32-i386 -a i386
EFLAGS: 00010206
eax: c8e98cc0   ebx: 00000000   ecx: c8ea0dc0   edx: 6f730069
esi: 0000000f   edi: cb823f90   ebp: bfffeff8   esp: cb823ef0
ds: 0018   es: 0018   ss: 0018
Process ls (pid: 31030, stackpage=cb823000)
Stack: cb823f90 00000000 00000001 cb820901 0015aeda c8ea0d40 ffffffa1
c0187291
       0000007b 00000000 cb823f94 df56e000 00000000 00000901 0014f0fa
df07a6c0
       df56e000 00000fe0 df56e000 fffffff4 bffff020 cb823f94 df56e000
00000000
Call Trace:    [<c0187291>] [<c0175b2c>] [<c0174535>] [<c0187291>]
[<c0131d43>]

Code: 83 3a 01 0f 84 ce fe ff ff 05 20 01 00 00 be 0b 00 00 00 c7


>>EIP; c01710ec <sys_lstat64+21c/290>   <=====

>>eax; c8e98cc0 <_end+88f2ce8/2030e0a8>
>>ecx; c8ea0dc0 <_end+88fade8/2030e0a8>
>>edi; cb823f90 <_end+b27dfb8/2030e0a8>
>>esp; cb823ef0 <_end+b27df18/2030e0a8>

Trace; c0187291 <sys_getxattr+61/70>
Trace; c0175b2c <__user_walk+5c/60>
Trace; c0174535 <path_release+15/40>
Trace; c0187291 <sys_getxattr+61/70>
Trace; c0131d43 <system_call+33/40>

Code;  c01710ec <sys_lstat64+21c/290>
00000000 <_EIP>:
Code;  c01710ec <sys_lstat64+21c/290>   <=====
   0:   83 3a 01                  cmpl   $0x1,(%edx)   <=====
Code;  c01710ef <sys_lstat64+21f/290>
   3:   0f 84 ce fe ff ff         je     fffffed7 <_EIP+0xfffffed7>
Code;  c01710f5 <sys_lstat64+225/290>
   9:   05 20 01 00 00            add    $0x120,%eax
Code;  c01710fa <sys_lstat64+22a/290>
   e:   be 0b 00 00 00            mov    $0xb,%esi
Code;  c01710ff <sys_lstat64+22f/290>
  13:   c7 00 00 00 00 00         movl   $0x0,(%eax)

any idea?
boldizsar


More information about the rsbac mailing list