lang: en

FreeBSD lock order reversal (LOR) #158

ID 158
state patched
responsible
reported first
reported last
do you know more? submit update by email
LOR
lock order reversal
 1st 0xc2289c3c rtentry (rtentry) @ sys/net/route.c:1269
 2nd 0xc14f1018 fxp0 (network driver) @ sys/dev/fxp/if_fxp.c:1172
		
KDB: stack backtrace:
kdb_backtrace(c0703f6f,c14f1018,c14e63f0,c06f1702,c06f19c6) at 0xc055b5ce = kdb_backtrace+0x2e
witness_checkorder(c14f1018,9,c06f19c6,494,c070a3bb) at 0xc0567c83 = witness_checkorder+0x6c3
_mtx_lock_flags(c14f1018,0,c06f19c6,494,c14e3c00) at 0xc0532e4a = _mtx_lock_flags+0x8a
fxp_start(c14e3c00,12b,0,c14e3c00) at 0xc04878c4 = fxp_start+0x34
if_start(c14e3c00,0,c070a3bb,197,202) at 0xc05bf159 = if_start+0x99
ether_output_frame(c14e3c00,c15f8e00,6,c15f8e00,100) at 0xc05c09eb = ether_output_frame+0x21b
ether_output(c14e3c00,c15f8e00,ca6d0a2c,0,2,c05c0001,c2282302,0,c070aaa5,4f5)
	at 0xc05c07be = ether_output+0x4be
arprequest(c14e3c00,c1bc83c8,ca6d0b00,c148faac,c2289bdc) at 0xc05e0289 = arprequest+0x109
arpresolve(c14e3c00,c2289bdc,c15f8d00,ca6d0afc,ca6d0a98) at 0xc05e0665 = arpresolve+0x3c5
ether_output(c14e3c00,c15f8d00,ca6d0afc,c2289bdc,c0567d67) at 0xc05c0382 = ether_output+0x82
ip_output(c15f8d00,0,ca6d0af8,0,0) at 0xc05ebef7 = ip_output+0x8a7
udp_output(c2285870,c15f8d00,0,0,c148aa80) at 0xc0600db0 = udp_output+0x550
udp_send(c2284de8,0,c15f8d00,0,0) at 0xc06015c0 = udp_send+0x30
sosend(c2284de8,0,ca6d0c34,c15f8d00,0) at 0xc0584f01 = sosend+0x701
kern_sendit(c148aa80,d,ca6d0cb4,0,0) at 0xc058b7cf = kern_sendit+0x13f
sendit(c148aa80,d,ca6d0cb4,0,80fd01d) at 0xc058b659 = sendit+0x1a9
sendto(c148aa80,ca6d0d04,18,422,6) at 0xc058b95b = sendto+0x5b
syscall(3b,3b,3b,2,0) at 0xc06bea50 = syscall+0x2c0
Xint0x80_syscall() at 0xc06ab77f = Xint0x80_syscall+0x1f
--- syscall (133, FreeBSD ELF32, sendto), eip = 0x2822ff7f, esp = 0xbfbfd0fc, ebp = 0xbfbfd128 ---
		
comments/references