From: Herbert Xu Subject: Re: 2.6.37-rc7: Regression: b43: crashes in hwrng_register() Date: Fri, 31 Dec 2010 11:37:35 +1100 Message-ID: <20101231003735.GA24101@gondor.apana.org.au> References: <4D1A8200.4010609@lwfinger.net> <20101229195440.GD5838@darkside.kls.lan> <4D1BD2B0.4020101@lwfinger.net> <20101230012003.GA2665@darkside.kls.lan> <4D1BF056.3060909@lwfinger.net> <20101230143406.GA23219@darkside.kls.lan> <4D1CD161.4040107@lwfinger.net> <20101230204522.GC23219@darkside.kls.lan> <4D1D0C61.9050800@lwfinger.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: Mario 'BitKoenig' Holbe , Matt Mackall , LKML , Linux Crypto Mailing List , Harald Welte , Michal Ludvig To: Larry Finger Return-path: Content-Disposition: inline In-Reply-To: <4D1D0C61.9050800@lwfinger.net> Sender: linux-kernel-owner@vger.kernel.org List-Id: linux-crypto.vger.kernel.org On Thu, Dec 30, 2010 at 04:49:05PM -0600, Larry Finger wrote: > > Do you see any problems in the code in drivers/net/wireless/b43/main.c or > drivers/char/hw_random/via-rng.c. As the latter seems to make b43 fail, I am > suspecting via-rng, but I have no proof. My suspicion is that VIA's xstore is writing more than 4 bytes as the list pointer happens to lie immediately after rng->priv which is where xstore is writing to. Harald, do you know whether this is documented or is this a known errata item? Thanks, -- Email: Herbert Xu Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt