From: Tejun Heo <tj@kernel.org>
To: Helge Deller <deller@gmx.de>
Cc: Libin <huawei.libin@huawei.com>,
linux-kernel@vger.kernel.org, linux-parisc@vger.kernel.org,
James Bottomley <James.Bottomley@HansenPartnership.com>
Subject: Re: [PATCH] [workqueue] check values of pwq and wq in print_worker_info() before use
Date: Tue, 1 Oct 2013 16:43:52 -0400 [thread overview]
Message-ID: <20131001204352.GA27149@mtj.dyndns.org> (raw)
In-Reply-To: <20131001203520.GA8248@p100.box>
Hello,
On Tue, Oct 01, 2013 at 10:35:20PM +0200, Helge Deller wrote:
> print_worker_info() includes no validity check on the pwq and wq
> pointers before handing them over to the probe_kernel_read() functions.
>
> It seems that most architectures don't care about that, but at least on
> the parisc architecture this leads to a kernel crash since accesses to
> page zero are protected by the kernel for security reasons.
>
> Fix this problem by verifying the contents of pwq and wq before usage.
> Even if probe_kernel_read() usually prevents such crashes by disabling
> page faults, clean code should always include such checks.
>
> Without this fix issuing "echo t > /proc/sysrq-trigger" will immediately
> crash the Linux kernel on the parisc architecture.
Hmm... um had similar problem but the root cause here is that the arch
isn't implementing probe_kernel_read() properly. We really have no
idea what the pointer value may be at the dump point and that's why we
use probe_kernel_read(). If something like the above is necessary for
the time being, the correct place would be the arch
probe_kernel_read() implementation. James, would it be difficult
implement proper probe_kernel_read() on parisc?
Thanks.
--
tejun
next prev parent reply other threads:[~2013-10-01 20:44 UTC|newest]
Thread overview: 14+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-10-01 20:35 Helge Deller
2013-10-01 20:43 ` Tejun Heo [this message]
2013-10-01 20:53 ` Helge Deller
2013-10-01 21:03 ` Tejun Heo
2013-10-01 21:07 ` Tejun Heo
2013-10-01 22:34 ` Helge Deller
2013-10-01 22:40 ` Tejun Heo
2013-10-01 22:47 ` Tejun Heo
2013-10-01 21:40 ` James Bottomley
2013-10-01 22:07 ` Helge Deller
2013-10-01 22:50 ` James Bottomley
2013-10-02 0:41 ` John David Anglin
2013-10-02 1:58 ` John David Anglin
2013-10-02 8:28 ` Helge Deller
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20131001204352.GA27149@mtj.dyndns.org \
--to=tj@kernel.org \
--cc=James.Bottomley@HansenPartnership.com \
--cc=deller@gmx.de \
--cc=huawei.libin@huawei.com \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-parisc@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®