402 Star 1.4K Fork 1.3K

GVPopenEuler / kernel

 / 详情

use-after-free in device_remove_properties

待办的
任务
创建于  
2023-08-28 20:40
[  478.944968] BUG: KASAN: use-after-free in device_remove_properties+0x6c/0xb4
[  478.952837] Read of size 8 at addr ffff6a64a9e4fa68 by task bash/10258

[  478.962403] CPU: 23 PID: 10258 Comm: bash Kdump: loaded Not tainted 5.10.0kobj-3+ #11
[  478.962407] Hardware name: Huawei TaiShan 2280 V2/BC82AMDD, BIOS 2280-V2 CS V5.B221.01 12/09/2021
[  478.962411] Call trace:
[  478.962418]  dump_backtrace+0x0/0x2fc
[  478.962422]  show_stack+0x20/0x30
[  478.962427]  dump_stack+0x104/0x17c
[  478.962434]  print_address_description.constprop.0+0x2c/0x1fc
[  478.962437]  __kasan_report+0xe0/0x140
[  478.962441]  kasan_report+0x44/0xdc
[  478.962445]  __asan_load8+0x94/0xd0
[  478.962450]  device_remove_properties+0x6c/0xb4
[  478.962457]  device_del+0x2d8/0x660
[  478.962465]  pci_remove_bus_device+0xc4/0x1a0
[  478.962470]  pci_stop_and_remove_bus_device+0x94/0xb0
[  478.962477]  pci_iov_remove_virtfn+0x160/0x210
[  478.962481]  sriov_disable+0x70/0x1ac
[  478.962486]  pci_disable_sriov+0x34/0x44
[  478.962527]  hisi_qm_sriov_disable+0x68/0x170 [hisi_qm]
[  478.962543]  hisi_qm_sriov_configure+0x1c/0x40 [hisi_qm]
[  478.962548]  sriov_numvfs_store+0x1ac/0x260
[  478.962551]  dev_attr_store+0x50/0x70
[  478.962559]  sysfs_kf_write+0x98/0xb0
[  478.962564]  kernfs_fop_write_iter+0x1b0/0x280
[  478.962568]  new_sync_write+0x1c8/0x2c4
[  478.962573]  vfs_write+0x2e8/0x390
[  478.962577]  ksys_write+0xcc/0x170
[  478.962581]  __arm64_sys_write+0x4c/0x60
[  478.962586]  invoke_syscall+0x68/0x1a0
[  478.962590]  el0_svc_common.constprop.0+0x1b0/0x1c0
[  478.962594]  do_el0_svc+0x8c/0xb0
[  478.962599]  el0_svc+0x20/0x30
[  478.962603]  el0_sync_handler+0xb0/0xb4
[  478.962608]  el0_sync+0x160/0x180

[  478.964837] Allocated by task 10258:
[  478.969183]  kasan_save_stack+0x28/0x60
[  478.969188]  __kasan_kmalloc.constprop.0+0xa4/0xd0
[  478.969193]  kasan_kmalloc+0x10/0x20
[  478.969197]  kmem_cache_alloc_trace+0xe0/0x570
[  478.969204]  swnode_register+0x54/0x310
[  478.969208]  fwnode_create_software_node+0xf8/0x130
[  478.969215]  device_add_properties+0x28/0x50
[  478.969221]  quirk_huawei_pcie_sva+0x12c/0x14c
[  478.969225]  pci_do_fixups+0x120/0x1b0
[  478.969229]  pci_fixup_device+0x4c/0x140
[  478.969233]  pci_bus_add_device+0x2c/0xd4
[  478.969237]  pci_iov_add_virtfn+0x470/0x49c
[  478.969241]  sriov_enable+0x368/0x690
[  478.969246]  pci_enable_sriov+0x3c/0x54
[  478.969261]  hisi_qm_sriov_enable+0x114/0x1b0 [hisi_qm]
[  478.969277]  hisi_qm_sriov_configure+0x2c/0x40 [hisi_qm]
[  478.969282]  sriov_numvfs_store+0x138/0x260
[  478.969285]  dev_attr_store+0x50/0x70
[  478.969289]  sysfs_kf_write+0x98/0xb0
[  478.969294]  kernfs_fop_write_iter+0x1b0/0x280
[  478.969297]  new_sync_write+0x1c8/0x2c4
[  478.969301]  vfs_write+0x2e8/0x390
[  478.969305]  ksys_write+0xcc/0x170
[  478.969309]  __arm64_sys_write+0x4c/0x60
[  478.969312]  invoke_syscall+0x68/0x1a0
[  478.969316]  el0_svc_common.constprop.0+0x1b0/0x1c0
[  478.969319]  do_el0_svc+0x8c/0xb0
[  478.969323]  el0_svc+0x20/0x30
[  478.969327]  el0_sync_handler+0xb0/0xb4
[  478.969331]  el0_sync+0x160/0x180

[  478.971557] Freed by task 10258:
[  478.975547]  kasan_save_stack+0x28/0x60
[  478.975552]  kasan_set_track+0x28/0x40
[  478.975556]  kasan_set_free_info+0x28/0x50
[  478.975561]  __kasan_slab_free+0xfc/0x18c
[  478.975565]  kasan_slab_free+0x14/0x20
[  478.975570]  kfree+0xe4/0x6b0
[  478.975574]  software_node_release+0xf4/0x16c
[  478.975578]  kobject_cleanup+0x158/0x1a8
[  478.975582]  kobject_put.part.0+0x9c/0xf4
[  478.975587]  kobject_put+0x18/0x24
[  478.975591]  software_node_notify+0xe8/0x1a0
[  478.975595]  device_platform_notify+0x54/0xc0
[  478.975599]  device_del+0x2c8/0x660
[  478.975603]  pci_remove_bus_device+0xc4/0x1a0
[  478.975607]  pci_stop_and_remove_bus_device+0x94/0xb0
[  478.975612]  pci_iov_remove_virtfn+0x160/0x210
[  478.975616]  sriov_disable+0x70/0x1ac
[  478.975620]  pci_disable_sriov+0x34/0x44
[  478.975636]  hisi_qm_sriov_disable+0x68/0x170 [hisi_qm]
[  478.975652]  hisi_qm_sriov_configure+0x1c/0x40 [hisi_qm]
[  478.975656]  sriov_numvfs_store+0x1ac/0x260
[  478.975659]  dev_attr_store+0x50/0x70
[  478.975664]  sysfs_kf_write+0x98/0xb0
[  478.975668]  kernfs_fop_write_iter+0x1b0/0x280
[  478.975671]  new_sync_write+0x1c8/0x2c4
[  478.975675]  vfs_write+0x2e8/0x390
[  478.975679]  ksys_write+0xcc/0x170
[  478.975682]  __arm64_sys_write+0x4c/0x60
[  478.975686]  invoke_syscall+0x68/0x1a0
[  478.975690]  el0_svc_common.constprop.0+0x1b0/0x1c0
[  478.975693]  do_el0_svc+0x8c/0xb0
[  478.975697]  el0_svc+0x20/0x30
[  478.975701]  el0_sync_handler+0xb0/0xb4
[  478.975705]  el0_sync+0x160/0x180

评论 (1)

liaoyu 创建了任务

Hi liaoyu15, welcome to the openEuler Community.
I'm the Bot here serving you. You can find the instructions on how to interact with me at Here.
If you have any questions, please contact the SIG: Kernel, and any of the maintainers.

openeuler-ci-bot 添加了
 
sig/Kernel
标签
liaoyu 任务状态待办的 修改为已拒绝
liaoyu 任务状态已拒绝 修改为待办的

登录 后才可以发表评论

状态
负责人
项目
里程碑
Pull Requests
关联的 Pull Requests 被合并后可能会关闭此 issue
分支
开始日期   -   截止日期
-
置顶选项
优先级
预计工期 (小时)
参与者(2)
5329419 openeuler ci bot 1632792936 10199985 liaoyu15 1666775638
C
1
https://gitee.com/openeuler/kernel.git
git@gitee.com:openeuler/kernel.git
openeuler
kernel
kernel

搜索帮助