lang: en

FreeBSD lock order reversal (LOR) #66

ID 66
state patched
responsible glebius
reported first 2005-03-14
reported last 2007-02-28
do you know more? submit update by email
LOR
lock order reversal
 1st 0xc5d5c900 inp (tcpinp) @ sys/netinet/tcp_usrreq.c:303
 2nd 0xc62d11ac so_rcv (so_rcv) @ sys/netinet/tcp_usrreq.c:304
 3rd 0xc6c4a414 inp (tcpinp) @ sys/netinet/in_pcb.c:971
		
KDB: stack backtrace:
kdb_backtrace(0,1,c072eac8,c072e960,c06fd0bc) at 0xc053e3c9 = kdb_backtrace+0x29
witness_checkorder(c6c4a414,9,c06ca766,3cb) at 0xc0547064 = witness_checkorder+0x544
_mtx_lock_flags(c6c4a414,0,c06ca766,3cb,0) at 0xc05205bb = _mtx_lock_flags+0x5b
in_pcblookup_local(c0753a00,0,50eb,1) at 0xc0599d33 = in_pcblookup_local+0xbf
in_pcbbind_setup(c5d5c870,0,c5d5c8a8,c5d5c88a,c643b500) at 0xc05991a2 = in_pcbbind_setup+0x522
in_pcbbind(c5d5c870,0,c643b500,c63a38ac,1) at 0xc0598c3a = in_pcbbind+0xce
tcp_usr_listen(c62d1144,c8f65320) at 0xc05b2791 = tcp_usr_listen+0xad
solisten(c62d1144,1,c8f65320,c6936908,0) at 0xc055ccb8 = solisten+0x18
listen(c8f65320,ec8add14,2,2,213) at 0xc0561ec4 = listen+0x5c
syscall(2f,2f,2f,3,0) at 0xc067fceb = syscall+0x213
Xint0x80_syscall() at 0xc066fabf = Xint0x80_syscall+0x1f
--- syscall (106, FreeBSD ELF32, listen), eip = 0x280e8d8b, esp = 0xbfbfeb0c, ebp = 0xbfbfeb68 ---
		
RELENG_6_1:
 1st 0xd3ae9360 inp (tcpinp) @ sys/netinet/tcp_usrreq.c:300
 2nd 0xd34bb074 so_rcv (so_rcv) @ sys/netinet/tcp_usrreq.c:301
 3rd 0xd3ae8630 inp (tcpinp) @ sys/netinet/in_pcb.c:956
		
RELENG_6_1:
 1st 0xd3ae9360 inp (tcpinp) @ sys/netinet/tcp_usrreq.c:300
 2nd 0xd34bb074 so_rcv (so_rcv) @ sys/netinet/tcp_usrreq.c:301
 3rd 0xd3ae8630 inp (tcpinp) @ sys/netinet/in_pcb.c:956
		
comments/references