lang: en

FreeBSD lock order reversal (LOR) #74

ID 74
state patched
responsible
reported first
reported last
do you know more? submit update by email
LOR
lock order reversal
 1st 0xc16718a0 rtentry (rtentry) @ sys/netinet/if_ether.c:445
 2nd 0xc14d7264 fxp0 (network driver) @ sys/modules/fxp/../../dev/fxp/if_fxp.c:1233
		
KDB: stack backtrace:
kdb_backtrace(c05fc462,c14d7264,c14cab80,c06fc810,c06fc7ad) at 0xc04b05ae = kdb_backtrace+0x2e
witness_checkorder(c14d7264,9,c06fc7ad,4d1,c06018d6) at 0xc04bb6c6 = witness_checkorder+0x6a6
_mtx_lock_flags(c14d7264,0,c06fc7ad,4d1,c14d7000) at 0xc048a62a = _mtx_lock_flags+0x8a
fxp_start(c14d7000,12b,0,c14d7000) at 0xc06f9db7 = fxp_start+0x37
if_start(c14d7000,0,c06018d6,184,202) at 0xc050a999 = if_start+0x99
ether_output_frame(c14d7000,c15d5500,6,12b,c1045b18) at 0xc050c0d8 = ether_output_frame+0x218
ether_output(c14d7000,c15d5500,ca446a40,0,2,c1670001,2302,c06021ce,1bd,516)
	at 0xc050beae = ether_output+0x44e
arprequest(c14d7000,c15fc0c8,ca446b14,c148c4ac,7) at 0xc0515489 = arprequest+0x109
arpresolve(c14d7000,c1671840,c15d5600,ca446b10,ca446aac) at 0xc05157cd = arpresolve+0x32d
ether_output(c14d7000,c15d5600,ca446b10,c1671840,c04bb7a7) at 0xc050badc = ether_output+0x7c
ip_output(c15d5600,0,ca446b0c,0,0) at 0xc0520897 = ip_output+0x7c7
udp_output(c166f9d8,c15d5600,0,0,c1499480) at 0xc0535a7a = udp_output+0x53a
udp_send(c166eca8,0,c15d5600,0,0) at 0xc0536280 = udp_send+0x30
sosend(c166eca8,0,ca446c48,c15d5600,0) at 0xc04d2db1 = sosend+0x701
kern_sendit(c1499480,d,ca446cc4,0,0) at 0xc04d95ef = kern_sendit+0x13f
sendit(c1499480,d,ca446cc4,0,810001d) at 0xc04d9481 = sendit+0x1a1
sendto(c1499480,ca446d14,18,431,6) at 0xc04d976b = sendto+0x5b
syscall(2f,2f,2f,2,0) at 0xc05d9170 = syscall+0x2a0
Xint0x80_syscall() at 0xc05c7c8f = Xint0x80_syscall+0x1f
--- syscall (133, FreeBSD ELF32, sendto), eip = 0x28233baf, esp = 0xbfbfd51c, ebp = 0xbfbfd548 ---
		
comments/references