lang: en

FreeBSD lock order reversal (LOR) #152

ID 152
state patched
responsible
reported first
reported last
do you know more? submit update by email
LOR
lock order reversal
 1st 0xc22c2bb8 rtentry (rtentry) @ sys/net/route.c:1269
 2nd 0xc1f36b68 iwi0 (network driver) @ sys/modules/iwi/../../dev/iwi/if_iwi.c:1587
		
KDB: stack backtrace:
kdb_backtrace(0,ffffffff,c07699f0,c0768640,c072c8c4) at kdb_backtrace+0x29
witness_checkorder(c1f36b68,9,c08e62d1,633) at witness_checkorder+0x52c
_mtx_lock_flags(c1f36b68,0,c08e62d1,633,c075fc80) at _mtx_lock_flags+0x5b
iwi_start(c1f43400) at iwi_start+0x35
if_start(c1f43400) at if_start+0x7b
ether_output_frame(c1f43400,c2167500,c0527e80,ffffffff,0) at ether_output_frame+0x1dc
ether_output(c1f43400,c2167500,e77cca38,0,2) at ether_output+0x3e4
arprequest(c1f43400,c22d5cc8,e77ccb08,c1ede2ac) at arprequest+0xd8
arpresolve(c1f43400,c22c2b58,c2167400,e77ccb04,e77ccaa8) at arpresolve+0x30b
ether_output(c1f43400,c2167400,e77ccb04,c22c2b58,c22d5c00) at ether_output+0x6b
ip_output(c2167400,0,e77ccb00,0,0) at ip_output+0x78c
udp_output(c2291924,c2167400,0,0,c22d0000) at udp_output+0x4a7
udp_send(c221642c,0,c2167400,0,0) at udp_send+0x1a
sosend(c221642c,0,e77ccc3c,c2167400,0) at sosend+0x5e3
kern_sendit(c22d0000,4,e77cccbc,0,0) at kern_sendit+0x104
sendit(c22d0000,4,e77cccbc,0,807b020) at sendit+0x163
sendto(c22d0000,e77ccd04,6,1,216) at sendto+0x4d
syscall(3b,3b,3b,0,2814fb04) at syscall+0x22f
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (133, FreeBSD ELF32, sendto),
    eip = 0x2812a85f, esp = 0xbfbfd82c, ebp = 0xbfbfd858 ---
		
comments/references