Page 1 of 1

another refcount overflow problem

PostPosted: Tue Apr 05, 2011 2:01 pm
by kmcfate
This time after system has been up for 40+ days i am getting a refcount overflow repeatedly in rpciod. Traces still show ?'s

Any clue as to whether this one has been addressed recently?

currently running 2.6.32.21-201009171945

Re: another refcount overflow problem

PostPosted: Tue Apr 05, 2011 6:07 pm
by PaX Team
kmcfate wrote:Any clue as to whether this one has been addressed recently?

currently running 2.6.32.21-201009171945
that's very old by now, so you should upgrade just because of that but we also fixed REFCOUNT false positives since, and i think one was in rpc code.

Re: another refcount overflow problem

PostPosted: Wed Apr 06, 2011 1:41 pm
by kmcfate
Decoded the stack trace on this.

Showing a false positive on 'trace_workqueue_insertion' in ./kernel/trace/trace_workqueue.c

atomic_inc(&node->inserted);

Counter eventually rolls over.

This is -not- patched in the latest version -> grsecurity-2.2.2-2.6.32.36-201103281752.patch

Re: another refcount overflow problem

PostPosted: Thu Apr 07, 2011 5:23 am
by PaX Team
kmcfate wrote:Showing a false positive on 'trace_workqueue_insertion' in ./kernel/trace/trace_workqueue.c

atomic_inc(&node->inserted);
thanks, i'll fix it in the next patch however i'm wondering, is this supported code still? i'm asking it because even if the code is present in .38, the corresponding .config option does not seem to exist anymore...