PAX size overflow in add_index fs/jfs/jfs_dtree.c:322 cicus.

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

PAX size overflow in add_index fs/jfs/jfs_dtree.c:322 cicus.

Postby g66 » Thu Jun 02, 2016 2:19 pm

PAX: size overflow detected in function add_index fs/jfs/jfs_dtree.c:322 cicus.474_175 max, count: 29, decl: offset; num: 0; context: lv;
CPU: 0 PID: 572 Comm: pacman Not tainted 4.5.5.201605291201-1-grsec #1
99fbb2a900000002 99fbb2a9c00edd98 0000000000000286 0000000000000000
ffffc9000097b848 ffffffff89329853 0000000000000002 99fbb2a9c00edd98
ffffffffc006021e 0000000000000142 ffffc9000097b878 ffffffff891e7b3c
Call Trace:
[<ffffffff89329853>] dump_stack+0x76/0xd3
[<ffffffffc006021e>] ? exit_jfs_fs+0x9db4/0xd15b [jfs]
[<ffffffff891e7b3c>] report_size_overflow+0x6c/0x90
[<ffffffffc0041850>] add_index+0x640/0x6b0 [jfs]
[<ffffffff8914b618>] ? mempool_alloc_slab+0x18/0x40
[<ffffffff89354173>] ? __list_add+0x33/0x90
[<ffffffffc00607d6>] ? exit_jfs_fs+0xa36c/0xd15b [jfs]
[<ffffffffc0041c05>] dtInsertEntry.isra.3+0x125/0x5b0 [jfs]
[<ffffffffc004faf1>] ? txLock+0x141/0x710 [jfs]
[<ffffffff8921724c>] ? __mark_inode_dirty+0x21c/0x2a0
[<ffffffffc004579c>] dtInsert+0x12c/0x330 [jfs]
[<ffffffffc0030614>] jfs_create.part.7+0x254/0x350 [jfs]
[<ffffffffc003073d>] jfs_create+0x2d/0x50 [jfs]
[<ffffffff891f210f>] vfs_create+0xaf/0x100
[<ffffffff891f35af>] path_openat+0x144f/0x1490
[<ffffffff891f4dd6>] do_filp_open+0xb6/0x140
[<ffffffff8920665c>] ? __alloc_fd+0xcc/0x1b0
[<ffffffff891f3b7e>] ? getname_flags+0x4e/0x190
[<ffffffff891dcebe>] do_sys_open+0x14e/0x220
[<ffffffff891dcfb7>] sys_open+0x27/0x50
[<ffffffff89687770>] entry_SYSCALL_64_fastpath+0x12/0x86
g66
 
Posts: 5
Joined: Thu Mar 03, 2016 2:49 pm

Re: PAX size overflow in add_index fs/jfs/jfs_dtree.c:322 ci

Postby Rick » Thu Jun 02, 2016 4:23 pm

Has your other jfs/grsec issue been fixed?

Subscribing to this thread,s ince I want to use jfs on hardened as well.

What did you call to hit the overflow?
Rick
 
Posts: 2
Joined: Mon May 30, 2016 10:17 am

Re: PAX size overflow in add_index fs/jfs/jfs_dtree.c:322 ci

Postby ephox » Mon Jun 06, 2016 5:40 pm

g66 wrote:PAX: size overflow detected in function add_index fs/jfs/jfs_dtree.c:322 cicus.474_175 max, count: 29, decl: offset; num: 0; context: lv;


Hi,
Could you please send me the results (fs/jfs/jfs_dtree.*) of make fs/jfs/jfs_dtree.o EXTRA_CFLAGS="-fdump-tree-all -fdump-ipa-all" and your kernel .config?
Which gcc version did you use?
ephox
 
Posts: 134
Joined: Tue Mar 20, 2012 4:36 pm

Re: PAX size overflow in add_index fs/jfs/jfs_dtree.c:322 ci

Postby g66 » Tue Jun 07, 2016 8:39 am

ephox wrote:Hi,
Could you please send me the results (fs/jfs/jfs_dtree.*) of make fs/jfs/jfs_dtree.o EXTRA_CFLAGS="-fdump-tree-all -fdump-ipa-all" and your kernel .config?
Which gcc version did you use?


I didn't build this myself, I simply used the Arch Linux package available here: https://www.archlinux.org/packages/comm ... nux-grsec/ where
you'll also find the .config file: https://git.archlinux.org/svntogit/comm ... inux-grsec

I assume the packager used the same gcc version as I have on my system: gcc (GCC) 6.1.1 20160501
g66
 
Posts: 5
Joined: Thu Mar 03, 2016 2:49 pm

Re: PAX size overflow in add_index fs/jfs/jfs_dtree.c:322 ci

Postby g66 » Tue Jun 07, 2016 8:45 am

Rick wrote:Has your other jfs/grsec issue been fixed?


Well, the boot process runs a bit further that the other jfs/grsec issue with this more recent kernel.
Sometimes I manage to get to the login prompt and login, sometimes it collapses during the
boot sequence.

Rick wrote:What did you call to hit the overflow?


I simply tried to update the Arch Linux install issuing on the command line: pacman -Syu
g66
 
Posts: 5
Joined: Thu Mar 03, 2016 2:49 pm

Re: PAX size overflow in add_index fs/jfs/jfs_dtree.c:322 cicus.

Postby ephox » Mon Jun 13, 2016 7:07 pm

Thanks for the report, it will be fixed in the next PaX patch.
ephox
 
Posts: 134
Joined: Tue Mar 20, 2012 4:36 pm


Return to grsecurity support