lang: en

FreeBSD lock order reversal (LOR) #139

ID 139
state patched
responsible
reported first
reported last
do you know more? submit update by email
LOR
lock order reversal
 1st 0xc1c694b0 rl0 (network driver) @ sys/pci/if_rl.c:1508
 2nd 0xc07182c0 Giant (Giant) @ sys/kern/kern_poll.c:458
		
KDB: stack backtrace:
witness_checkorder(c07182c0,9,c06bc486,1ca,e1ddea40) at witness_checkorder+0x526
_mtx_lock_flags(c07182c0,0,c06bc486,1ca,c1ca5c00) at _mtx_lock_flags+0x54
ether_poll_deregister(c1ca5c00,c1c69000,0,6b5,c1c694b0) at ether_poll_deregister+0x2e
rl_stop(c1ca7080,1,c06c9b2c,5f0,c056e1c3) at rl_stop+0x64
rl_init_locked(c1c694b0,8,c06c9b2c,5e4,c1ca5c00) at rl_init_locked+0x4e
rl_init(c1c69000,e1ddeb0c,c053b325,8020690c,c1ca5c00) at rl_init+0x3e
ether_ioctl(c1ca5c00,8020690c,c1dd1b00,c06be2a6,0) at ether_ioctl+0xa7
rl_ioctl(c1ca5c00,8020690c,c1dd1b00,c06c0421,c1dd1bc8) at rl_ioctl+0x8b
in_ifinit(c1db3990,0,0,0,c06c657c) at in_ifinit+0xa7
in_control(c1e93de8,8040691a,c1db3980,c1ca5c00,c1ced960) at in_control+0xfa0
ifioctl(c1e93de8,8040691a,c1db3980,c1ced960,2) at ifioctl+0x139
soo_ioctl(c1df23f0,8040691a,c1db3980,c1bc4d80,c1ced960) at soo_ioctl+0x2ef
ioctl(c1ced960,e1dded04,c,422,3) at ioctl+0x118
syscall(3b,3b,3b,80573a0,1) at syscall+0x13d
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (54, FreeBSD ELF32, ioctl),
    eip = 0x280ce2cf, esp = 0xbfbfe5ec, ebp = 0xbfbfee58 ---
		
comments/references