RE: Potential IPSec DoS/Kernel Panic with 2.6.13

From: Matt LaPlante (laplam_at_rpi.edu)
Date: 09/05/05

  • Next message: Johannes Stezenbach: "[DVB patch 30/54] usb: white space cleanup"
    To: "'Jesper Juhl'" <jesper.juhl@gmail.com>
    Date:	Sun, 4 Sep 2005 20:06:48 -0400
    
    

    I did a direct serial connection and boy was that a lot easier. Anyway,
    without further adeu, the crash:

    #############################
    Unable to handle kernel paging request at virtual address 50c86502
     printing eip:
    c01bd216
    *pde = 00000000
    Oops: 0000 [#1]
    PREEMPT
    Modules linked in: aes_i586 esp6 ah6 ipcomp esp4 ah4 af_key xfrm_user
    michael_mic deflate twofish khazad wp512 arc4 serpent tea sha512 blowfish
    sha256 md5 md4 cast6 cast5 des crypto_null zlib_deflate ipv6 ipt_ULOG
    ipt_REJECT ipt_LOG ipt_state ipt_pkttype ipt_CONNMARK ipt_connmark ipt_owner
    ipt_recent ipt_iprange ipt_multiport ip_nat_irc ip_nat_tftp ip_conntrack_irc
    ip_conntrack_tftp evdev floppy pcspkr intel_agp via_rhine mii tulip agpgart
    psmouse ide_cd cdrom
    CPU: 0
    EIP: 0060:[<c01bd216>] Not tainted VLI
    EFLAGS: 00010216 (2.6.13-Firewall.CyberDog.v12)
    EIP is at sha1_update+0x96/0xe0
    eax: cd485f0c ebx: 0000000c ecx: 00000003 edx: 00000244
    esi: 50c86502 edi: cd485f5c ebp: 50c86502 esp: c0333c40
    ds: 007b es: 007b ss: 0068
    Process swapper (pid: 0, threadinfo=c0332000 task=c02edb80)
    Stack: 00000244 cd485f0c 00000000 00000000 00000000 00000000 00000000
    00000000
           00000000 00000000 00000000 00000000 00000000 00000000 00000000
    00000000
           00000000 00000000 00000000 00000000 00000000 00000000 00000000
    00000000
    Call Trace:
     [<c01bc881>] update+0x91/0xd0
     [<c01bcf11>] crypto_hmac_update+0x11/0x20
     [<c02a28c3>] skb_icv_walk+0xe3/0x200
     [<d0aa5d23>] esp_hmac_digest+0x63/0xa0 [esp4]
     [<c01bcf00>] crypto_hmac_update+0x0/0x20
     [<c01bc524>] cbc_encrypt+0x44/0x50
     [<d0aa5350>] esp_output+0x350/0x420 [esp4]
     [<c029c920>] xfrm4_output+0x70/0x170
     [<c0260510>] ip_forward_finish+0x0/0x40
     [<c02603bf>] ip_forward+0x16f/0x2c0
     [<c0260510>] ip_forward_finish+0x0/0x40
     [<c025ed85>] ip_rcv+0x365/0x4d0
     [<c025f0a0>] ip_rcv_finish+0x0/0x280
     [<c02a67a6>] packet_rcv_spkt+0x186/0x260
     [<d09e77f0>] tulip_poll+0x0/0x680 [tulip]
     [<c0244ea9>] netif_receive_skb+0x1a9/0x260
     [<d09e7c55>] tulip_poll+0x465/0x680 [tulip]
     [<d09df692>] rhine_interrupt+0x42/0x240 [via_rhine]
     [<c02450fc>] net_rx_action+0xac/0x1b0
     [<c0119c19>] __do_softirq+0x79/0x90
     [<c0119c57>] do_softirq+0x27/0x30
     [<c0119d25>] irq_exit+0x35/0x40
     [<c01047be>] do_IRQ+0x1e/0x30
     [<c0102df2>] common_interrupt+0x1a/0x20
     [<c0100bf0>] default_idle+0x0/0x30
     [<c0100c13>] default_idle+0x23/0x30
     [<c0100cb0>] cpu_idle+0x50/0x60
     [<c0334787>] start_kernel+0x177/0x1c0
     [<c0334340>] unknown_bootoption+0x0/0x1c0
    Code: 83 e1 03 74 02 f3 a4 81 c4 48 01 00 00 5b 5e 5f 5d c3 8d 76 00 8b 44
    24 04 bb 40 00 00 00 29 f3 89 d9 8d 7c 06 1c 89 ee c1 e9 02 <f3> a5 89 d9 83
    e1 03 74 02 f3 a4 89 c6 8d 7c 24 08 89 c2 83 c6
     <0>Kernel panic - not syncing: Fatal exception in interrupt
    #############################

    Hope that helps! If you need more info just ask!

    -
    Matt

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/


  • Next message: Johannes Stezenbach: "[DVB patch 30/54] usb: white space cleanup"

    Relevant Pages

    • Oops in 2.6.7: swap doesnt seem to happen
      ... free memory. ... Unable to handle kernel paging request at virtual address 0000186b ... send the line "unsubscribe linux-kernel" in ...
      (Linux-Kernel)
    • Re: 2.6.9-mm1
      ... It looks like IDE PIO got badly broken. ... > Unable to handle kernel paging request at virtual address fffea000 ... send the line "unsubscribe linux-kernel" in ... More majordomo info at http://vger.kernel.org/majordomo-info.html ...
      (Linux-Kernel)
    • 2.6.0-test5-mm1 Oops using rm -rf (SMP)
      ... I ran the command again without thinking and it hung, ... send the line "unsubscribe linux-kernel" in ... More majordomo info at http://vger.kernel.org/majordomo-info.html ...
      (Linux-Kernel)
    • 2.6.4-rc1 & rc2 Oops
      ... Unable to handle kernel paging request at virtual address 20000004 ... send the line "unsubscribe linux-kernel" in ... More majordomo info at http://vger.kernel.org/majordomo-info.html ...
      (Linux-Kernel)
    • Re: [PATCH][noop-iosched] dont reuse a freed request
      ... > so I did a quick hack that seems enough for my case. ... hda:Unable to handle kernel paging request at virtual address c554ef60 ... send the line "unsubscribe linux-kernel" in ... More majordomo info at http://vger.kernel.org/majordomo-info.html ...
      (Linux-Kernel)