PAX: size overflow detected in function copy_process

[gus]

Hi, I can't use qemu with grsecurity-3.1-4.2.3-201510171833.patch

Code: Select all

[  609.800924] PAX: size overflow detected in function copy_process.part.37 /home/user/linux-stable/kernel/fork.c:547 cicus.450_1034 max, count: 13, decl: vm_stat_account; num: 4; context: fndecl;
[  609.800930] CPU: 3 PID: 4866 Comm: qemu-system-x86 Not tainted 4.2.3-grsec+ #1
[  609.800934]  0000000000000000 fd03b720f303d905 ffffffffb2ecc1f0 0000000000000000
[  609.800938]  ffffffffb2ecc1f0 ffffffffb2b913c4 ffffffffb2ec8ba9 ffffffffb2791e25
[  609.800941]  30d9f705fa2a221c ffff88030ba14498 cdada57769097243 ffff880035ee8400
[  609.800944] Call Trace:
[  609.800952]  [<ffffffffb2b913c4>] ? dump_stack+0x40/0x50
[  609.800957]  [<ffffffffb2791e25>] ? report_size_overflow+0x35/0x40
[  609.800962]  [<ffffffffb2666c13>] ? copy_process.part.37+0x1913/0x2360
[  609.800966]  [<ffffffffb266782e>] ? _do_fork+0xee/0x3b0
[  609.800971]  [<ffffffffb2b971af>] ? entry_SYSCALL_64_fastpath+0x16/0x89


Code: Select all

[  840.669316] INFO: task khugepaged:34 blocked for more than 120 seconds.
[  840.669320]       Not tainted 4.2.3-grsec+ #1
[  840.669321] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  840.669323] khugepaged      D ffff88031e2d1480     0    34      2 0x00000000
[  840.669326]  ffff8803103f6080 0000000000000046 ffffffffb26c2999 ffff8803103f64a0
[  840.669328]  ffff88030c187eb0 ffffffffffffffff ffff88030c187ec8 ffff88030e4252c0
[  840.669330]  0000000000000000 ffffffffb2b931de ffff8803103f6080 ffffffffb2b95b0f
[  840.669332] Call Trace:
[  840.669338]  [<ffffffffb26c2999>] ? lock_timer_base.isra.22+0x49/0x60
[  840.669341]  [<ffffffffb2b931de>] ? schedule+0x2e/0x70
[  840.669343]  [<ffffffffb2b95b0f>] ? rwsem_down_read_failed+0xff/0x160
[  840.669346]  [<ffffffffb28d7614>] ? call_rwsem_down_read_failed+0x14/0x30
[  840.669348]  [<ffffffffb2b953df>] ? down_read+0x1f/0x30
[  840.669352]  [<ffffffffb2779897>] ? khugepaged+0x507/0x16e0
[  840.669355]  [<ffffffffb269bf01>] ? enqueue_task_fair+0x2b1/0x1150
[  840.669358]  [<ffffffffb2616b8b>] ? native_sched_clock+0x2b/0xc0
[  840.669361]  [<ffffffffb268f86a>] ? check_preempt_curr+0x5a/0xa0
[  840.669362]  [<ffffffffb26a1013>] ? pick_next_task_fair+0x1d3/0x8d0
[  840.669364]  [<ffffffffb26a6fb0>] ? wait_woken+0x90/0x90
[  840.669366]  [<ffffffffb2779390>] ? maybe_pmd_mkwrite+0x30/0x30
[  840.669368]  [<ffffffffb2688f4b>] ? kthread+0xdb/0x100
[  840.669370]  [<ffffffffb2688e70>] ? kthread_create_on_node+0x190/0x190
[  840.669372]  [<ffffffffb2b975fe>] ? ret_from_fork+0x3e/0x70
[  840.669373]  [<ffffffffb2688e70>] ? kthread_create_on_node+0x190/0x190
[  840.669391] INFO: task qemu-system-x86:4866 blocked for more than 120 seconds.
[  840.669392]       Not tainted 4.2.3-grsec+ #1
[  840.669393] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  840.669394] qemu-system-x86 D 0000000000000003     0  4866   4850 0x00000000
[  840.669396]  ffff88030d14ca80 0000000000000086 ffffffffb26989f1 ffff88030d14cea0
[  840.669397]  ffff88030c187eb0 ffffffffffffffff ffff88030c187ec8 ffff88030c187eb0
[  840.669399]  0000000000000000 ffffffffb2b931de ffff88030d14ca80 ffffffffb2b95b0f
[  840.669401] Call Trace:
[  840.669403]  [<ffffffffb26989f1>] ? select_idle_sibling+0xb1/0x110
[  840.669405]  [<ffffffffb2b931de>] ? schedule+0x2e/0x70
[  840.669407]  [<ffffffffb2b95b0f>] ? rwsem_down_read_failed+0xff/0x160
[  840.669411]  [<ffffffffb2701a1a>] ? __delayacct_add_tsk+0x14a/0x160
[  840.669413]  [<ffffffffb28d7614>] ? call_rwsem_down_read_failed+0x14/0x30
[  840.669414]  [<ffffffffb2b953df>] ? down_read+0x1f/0x30
[  840.669417]  [<ffffffffb266aafc>] ? do_exit+0x18c/0xaa0
[  840.669420]  [<ffffffffb2674e50>] ? signal_wake_up_state+0x20/0x40
[  840.669422]  [<ffffffffb266b48f>] ? do_group_exit+0x2f/0xb0
[  840.669428]  [<ffffffffb2791e2f>] ? report_size_overflow+0x3f/0x40
[  840.669430]  [<ffffffffb2666c13>] ? copy_process.part.37+0x1913/0x2360
[  840.669433]  [<ffffffffb266782e>] ? _do_fork+0xee/0x3b0
[  840.669435]  [<ffffffffb2b971af>] ? entry_SYSCALL_64_fastpath+0x16/0x89
[  840.669437] INFO: task qemu-system-x86:4871 blocked for more than 120 seconds.


[ephox]

Thanks for the report, it will be fixed in the next grsec patch.

[gus]

Solved by commit 128d3a5452ab001b29235b05eb0be3334fff3998