lang: en

FreeBSD lock order reversal (LOR) #39

ID 39
state patched
responsible
reported first
reported last
do you know more? submit update by email
LOR
lock order reversal
 1st 0xc08e8e00 if_cloners lock (if_cloners lock) @ net/if_clone.c:242
 2nd 0xc58b5878 user map (user map) @ vm/vm_map.c:2994
		
KDB: stack backtrace:
kdb_backtrace(0,ffffffff,c08c42e8,c08c4e28,c08585ac) at kdb_backtrace+0x29
witness_checkorder(c58b5878,9,c0812247,bb2) at witness_checkorder+0x544
_sx_xlock(c58b5878,c081223e,bb2) at _sx_xlock+0x50
_vm_map_lock_read(c58b5834,c081223e,bb2,28bc3e0,c58dbcac) at _vm_map_lock_read+0x37
vm_map_lookup(eb95baa0,8054000,2,eb95baa4,eb95ba94) at vm_map_lookup+0x28
vm_fault(c58b5834,8054000,2,8,c58df190) at vm_fault+0x66
trap_pfault(eb95bb68,0,8054000) at trap_pfault+0xf2
trap(c0800018,c08e0010,10,8054000,eb95bbd4) at trap+0x335
calltrap() at calltrap+0x5
--- trap 0xc, eip = 0xc078ed4c, esp = 0xeb95bba8, ebp = 0xeb95bbf0 ---
slow_copyout(eb95bc60,eb95bc14,c0628292,eb95bc60,eb95bc60) at slow_copyout+0x4
ifioctl(c588f144,c00c6978,eb95bc60,c58df190,0) at ifioctl+0x95
soo_ioctl(c58d0264,c00c6978,eb95bc60,c5e68800,c58df190) at soo_ioctl+0x2b1
ioctl(c58df190,eb95bd14,3,0,292) at ioctl+0x3e0
syscall(2f,2f,2f,bfbfec5c,8054000) at syscall+0x213
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (54, FreeBSD ELF32, ioctl), eip = 0x280cc083, esp = 0xbfbfec3c, ebp = 0xbfbfec78 ---
		
comments/references