linux-kernel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Andrew Morton <akpm@digeo.com>
To: Felipe Alfaro Solana <felipe_alfaro@linuxmail.org>
Cc: linux-kernel@vger.kernel.org, linux-mm@kvack.org,
	Trond Myklebust <trond.myklebust@fys.uio.no>,
	Neil Brown <neilb@cse.unsw.edu.au>
Subject: Re: 2.5.69-mm9
Date: Sun, 25 May 2003 15:48:40 -0700	[thread overview]
Message-ID: <20030525154840.3ba7609b.akpm@digeo.com> (raw)
In-Reply-To: <1053899811.750.1.camel@teapot.felipe-alfaro.com>

Felipe Alfaro Solana <felipe_alfaro@linuxmail.org> wrote:
>
> Unable to handle kernel paging request at virtual address c8df7014
>   printing eip:
>  e08d1a9b
>  *pde = 00023067
>  *pte = 08df7000
>  Oops: 0000 [#1]
>  CPU:    0
>  EIP:    0060:[<e08d1a9b>]    Not tainted VLI
>  EFLAGS: 00010206
>  EIP is at svc_udp_recvfrom+0x52b/0x560 [sunrpc]
>  eax: dda32004   ebx: c8df7004   ecx: ddff0004   edx: d73ba938
>  esi: c8df7004   edi: d68549c4   ebp: 0000808c   esp: de3d3eec
>  ds: 007b   es: 007b   ss: 0068
>  Process nfsd (pid: 2182, threadinfo=de3d2000 task=d6490000)
>  Stack: de3d3f04 d73ba938 ddff0004 c012d4b5 de3d3f04 de3d3f04 c02ea1b0 de3e1f04 
>         0082863d 1d244b3c 00000000 00000005 c02b4e54 00000000 00000000 4b87ad6e 
>         c012d3e0 d6490000 00000000 de3d2000 d73ba938 ddff0004 00000000 e08d384e 
>  Call Trace:
>   [<c012d4b5>] schedule_timeout+0xc5/0xe0
>   [<c012d3e0>] process_timeout+0x0/0x10
>   [<e08d384e>] svc_recv+0x67e/0x850 [sunrpc]
>   [<c011db20>] default_wake_function+0x0/0x20
>   [<e08d06c2>] svc_process+0x4e2/0x690 [sunrpc]
>   [<c011db20>] default_wake_function+0x0/0x20
>   [<c013167a>] sigprocmask+0x18a/0x280
>   [<e090c549>] nfsd+0x289/0x7c0 [nfsd]
>   [<e090c2c0>] nfsd+0x0/0x7c0 [nfsd]
>   [<c0108201>] kernel_thread_helper+0x5/0x14
> 
>  Code: 0f 00 00 8b 4c 24 60 c1 e8 0c 0f b7 91 88 01 00 00 01 c2 66 89 91 88 01 00 00 8b 54 24 04 8b 42 14 85 c0 74 03 ff 40 08 8b 47 14 <8b> 53 10 8b 4b 14 89 90 94 01 00 00 89 88 98 01 00 00 31 c0 0f 


OK, you have CONFIG_DEBUG_PAGEALLOC set.  That's the patch which unmaps
pages from kernel virtual address space when they are freed.

That patch seems quite stable on uniprocessor at least - there are question
marks over its honesty on SMP.

I would be inclined to say that this is a hitherto undiscovered
use-after-free bug.


  reply	other threads:[~2003-05-25 22:32 UTC|newest]

Thread overview: 21+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-05-25 11:27 2.5.69-mm9 Andrew Morton
2003-05-25 12:56 ` 2.5.69-mm9 Rudmer van Dijk
2003-05-25 14:07   ` 2.5.69-mm9 Ed Sweetman
2003-05-25 20:06     ` 2.5.69-mm9 Andrew Morton
2003-05-25 20:29       ` 2.5.69-mm9 Adrian Bunk
2003-05-25 16:47   ` 2.5.69-mm9 Nicholas Wourms
2003-05-25 17:06 ` 2.5.69-mm9 Adam Kropelin
2003-05-25 20:54 ` 2.5.69-mm9: undefined references to `router_devlist' Adrian Bunk
2003-05-26 13:15   ` Arnaldo Carvalho de Melo
2003-05-27  2:34     ` [PATCH] wanrouter: fix bug introduced by latest namespace fix Arnaldo Carvalho de Melo
2003-05-27  7:08       ` David S. Miller
2003-05-25 21:56 ` 2.5.69-mm9 Felipe Alfaro Solana
2003-05-25 22:48   ` Andrew Morton [this message]
2003-05-25 23:16     ` 2.5.69-mm9 Neil Brown
2003-05-25 23:19     ` 2.5.69-mm9 Trond Myklebust
2003-05-25 15:19 2.5.69-mm9 Alistair J Strachan
2003-05-25 20:15 ` 2.5.69-mm9 Andrew Morton
2003-05-25 20:35   ` 2.5.69-mm9 Alistair J Strachan
2003-05-25 20:51     ` 2.5.69-mm9 Mike Fedyk
2003-05-25 20:55     ` 2.5.69-mm9 Andrew Morton
     [not found] <20030525172746.43b9866d.akpm@digeo.com>
     [not found] ` <20030529204324.GF25560@kroah.com>
2003-05-29 23:48   ` 2.5.69-mm9 Alistair J Strachan

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20030525154840.3ba7609b.akpm@digeo.com \
    --to=akpm@digeo.com \
    --cc=felipe_alfaro@linuxmail.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=linux-mm@kvack.org \
    --cc=neilb@cse.unsw.edu.au \
    --cc=trond.myklebust@fys.uio.no \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).