[PATCH] Security: List corruption occured during file system automation test
From: Shivnandan Kumar
Date: Tue Sep 16 2014 - 04:55:22 EST
Hi Stephen Smalley,
Reproduction path :-
We do random file system operation ( e.g. - Saving, Open, Play, Delete ) of files and during this some time we abruptly power off the device.
Thanks,
Shivnandan
------- Original Message -------
Sender : Stephen Smalley<sds@xxxxxxxxxxxxx>
Date : Aug 26, 2014 23:46 (GMT+09:00)
Title : Re: [PATCH] Security: List corruption occured during file system automation test
Do you have a reproducer test case to trigger the bug?
On 08/21/2014 06:29 AM, Shivnandan Kumar wrote:
> Dear Eric Paris,
>
> Sorry for the late reply.
> Yes I have back trace and I am attaching it.
>
> First time the issue is reproduced then I have added some debug statement in the
> file kernel/security/selinux/hooks.c to narrow down the problem and then we
> reproduce the issue again.
> I am attaching complete back trace as well as my additional debug patch for
> your reference.
>
> Thanks,
>
> Shivnandan
>
> ------- *Original Message* -------
>
> *Sender* : Eric Paris
>
> *Date* : Aug 14, 2014 05:27 (GMT+09:00)
>
> *Title* : Re: [PATCH] Security: List corruption occured during file system
> automation test
>
> Do you have a backtrace?
>
> On Wed, Aug 13, 2014 at 8:30 AM, Al Viro wrote:
> > On Wed, Aug 13, 2014 at 05:04:13PM +0530, shivnandan.k@xxxxxxxxxxx wrote:
> >> From: Shivnandan Kumar
> >>
> >> List element was freed by inode_free_security and then it uses rcu
> >> element to point inode_free_rcu, since it inside a union so it
> >> shares memory, sb_finish_set_opts now also try to free list element,
> >
> > How in hell does it find that element?
>
> Thanks and Regards,
>
> Shivnandan Kumar
>
>
>
> _______________________________________________
> Selinux mailing list
> Selinux@xxxxxxxxxxxxx
> To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxxx
> To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxxx
>
Thanks and Regards,
Shivnandan Kumar