Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752097Ab0LaAqd (ORCPT ); Thu, 30 Dec 2010 19:46:33 -0500 Received: from mail-vw0-f46.google.com ([209.85.212.46]:57116 "EHLO mail-vw0-f46.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750875Ab0LaAqb (ORCPT ); Thu, 30 Dec 2010 19:46:31 -0500 DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=sender:message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type; b=w1brzY8jWZJKeqrt3kDaNjtI0hAS2ewcbK13Sqh+75MxizWRs2rIMxiQBgmbye/shZ J45nHbC8EL3xu7yPJ1EuB4UMsSDxiuuMzd5mwwhGrN/Cs17O2FxRvOdpsH38/v7HsYzO SFmF24NAfSwuRuROaMLCPmcCyGabAMD3OFyxk= Message-ID: <4D1D27E7.7030301@lwfinger.net> Date: Thu, 30 Dec 2010 18:46:31 -0600 From: Larry Finger User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.16) Gecko/20101125 SUSE/3.0.11 Thunderbird/3.0.11 MIME-Version: 1.0 To: Herbert Xu CC: "Mario 'BitKoenig' Holbe" , Matt Mackall , LKML , Linux Crypto Mailing List , Harald Welte , Michal Ludvig Subject: Re: 2.6.37-rc7: Regression: b43: crashes in hwrng_register() References: <4D1A8200.4010609@lwfinger.net> <20101229195440.GD5838@darkside.kls.lan> <4D1BD2B0.4020101@lwfinger.net> <20101230012003.GA2665@darkside.kls.lan> <4D1BF056.3060909@lwfinger.net> <20101230143406.GA23219@darkside.kls.lan> <4D1CD161.4040107@lwfinger.net> <20101230204522.GC23219@darkside.kls.lan> <4D1D0C61.9050800@lwfinger.net> <20101231003735.GA24101@gondor.apana.org.au> In-Reply-To: <20101231003735.GA24101@gondor.apana.org.au> Content-Type: multipart/mixed; boundary="------------090805080501070202040206" Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 2200 Lines: 67 This is a multi-part message in MIME format. --------------090805080501070202040206 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit On 12/30/2010 06:37 PM, Herbert Xu wrote: > On Thu, Dec 30, 2010 at 04:49:05PM -0600, Larry Finger wrote: >> >> Do you see any problems in the code in drivers/net/wireless/b43/main.c or >> drivers/char/hw_random/via-rng.c. As the latter seems to make b43 fail, I am >> suspecting via-rng, but I have no proof. > > My suspicion is that VIA's xstore is writing more than 4 bytes as > the list pointer happens to lie immediately after rng->priv which > is where xstore is writing to. > > Harald, do you know whether this is documented or is this a known > errata item? The following patch should be able to test if xstore is overwriting the list pointer. Larry --- Index: wireless-testing/include/linux/hw_random.h =================================================================== --- wireless-testing.orig/include/linux/hw_random.h +++ wireless-testing/include/linux/hw_random.h @@ -38,6 +38,7 @@ struct hwrng { int (*data_read)(struct hwrng *rng, u32 *data); int (*read)(struct hwrng *rng, void *data, size_t max, bool wait); unsigned long priv; + char junk[12]; /* internal. */ struct list_head list; --------------090805080501070202040206 Content-Type: text/plain; name="hwrng_debug" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="hwrng_debug" Index: wireless-testing/include/linux/hw_random.h =================================================================== --- wireless-testing.orig/include/linux/hw_random.h +++ wireless-testing/include/linux/hw_random.h @@ -38,6 +38,7 @@ struct hwrng { int (*data_read)(struct hwrng *rng, u32 *data); int (*read)(struct hwrng *rng, void *data, size_t max, bool wait); unsigned long priv; + char junk[12]; /* internal. */ struct list_head list; --------------090805080501070202040206-- -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/