lang: en

FreeBSD lock order reversal (LOR) #203

ID 203
state patched
responsible
reported first 2006-02-25
reported last 2007-08-06
do you know more? submit update by email
LOR
lock order reversal:
 1st 0xc6a37090 inp (divinp) @ sys/netinet/ip_divert.c:336
 2nd 0xc070a18c tcp (tcp) @ sys/netinet/ip_fw2.c:1982
		
KDB: stack backtrace:
kdb_backtrace(0,ffffffff,c06c8f10,c06cadb0,c0694084,...) at kdb_backtrace+0x29
witness_checkorder(c070a18c,9,c0665b07,7be) at witness_checkorder+0x578
_mtx_lock_flags(c070a18c,0,c0665b07,7be) at _mtx_lock_flags+0x78
check_uidgid(c6a890b0,6,c6507800,46c046c1,6e,...) at check_uidgid+0xdf
ipfw_chk(e6cc49f0,c6cfdb00,c6507800,0,0,...) at ipfw_chk+0xd74
ipfw_check_out(0,e6cc4ae8,c6507800,2,0) at ipfw_check_out+0xe0
pfil_run_hooks(c0709d40,e6cc4b5c,c6507800,2,0,...) at pfil_run_hooks+0xc9
ip_output(c6cfdb00,0,e6cc4b28,22,0,...) at ip_output+0x66a
div_output(c67a8000,c6cfdb00,c6b35be0,0,e6cc4c08,...) at div_output+0x185
div_send(c67a8000,0,c6cfdb00,c6b35be0,0,...) at div_send+0x3f
sosend(c67a8000,c6b35be0,e6cc4c3c,c6cfdb00,0,0,c657aa80) at sosend+0x5eb
kern_sendit(c657aa80,3,e6cc4cbc,0,0,0) at kern_sendit+0x104
sendit(c657aa80,3,e6cc4cbc,0,bfbdebc4,...) at sendit+0x163
sendto(c657aa80,e6cc4d04) at sendto+0x4d
syscall(3b,3b,3b,2,34,...) at syscall+0x25b
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (133, FreeBSD ELF32, sendto), eip = 0x2812ef43, esp = 0xbfbdeafc, ebp = 0xbfbeeba8 ---
		
comments/references