lang: en

FreeBSD lock order reversal (LOR) #37

ID 37
state patched
responsible
reported first
reported last
do you know more? submit update by email
LOR
lock order reversal
 1st 0xc1db3504 rtentry (rtentry) @ sys/netinet/if_ether.c:423
 2nd 0xc27cc620 bridge (bridge) @ sys/modules/bridge/../../net/bridge.c:940
		
KDB: stack backtrace:
kdb_backtrace(c0878da2,c27cc620,c27cbab4,c27cbab4,c27cbba1) at kdb_backtrace+0x2f
witness_checkorder(c27cc620,9,c27cbba1,3ac,d94a0950) at witness_checkorder+0x6b6
_mtx_lock_flags(c27cc620,0,c27cbba1,3ac,c09497e0) at _mtx_lock_flags+0x85
bdg_forward(c1cf6900,c1a7f800,c066813c,c0966670,c1979468) at bdg_forward+0xa8
ether_output_frame(c1a7f800,c1cf6900,6,c087499a,121) at ether_output_frame+0x95
ether_output(c1a7f800,c1cf6900,d94a0a64,0,2,c1db0001,2302,c087fe3d,1a7,516) at ether_output+0x423
arprequest(c1a7f800,c1d231c8,d94a0b38,c197b2ab,b) at arprequest+0x109
arpresolve(c1a7f800,c1db34a4,c1cf6500,d94a0b34,d94a0ad4) at arpresolve+0x317
ether_output(c1a7f800,c1cf6500,d94a0b34,c1db34a4,c066813c) at ether_output+0x7c
ip_output(c1cf6500,0,d94a0b30,20,0) at ip_output+0x79c
rip_output(c1cf6500,c215b144,9500a8c0,2e9,c1cf6500) at rip_output+0x2ea
rip_send(c215b144,0,c1cf6500,c1bee010,0) at rip_send+0xcd
sosend(c215b144,c1bee010,d94a0c48,c1cf6500,0) at sosend+0x6cd
kern_sendit(c1ab49a0,4,d94a0cc4,0,0) at kern_sendit+0x128
sendit(c1ab49a0,4,d94a0cc4,0,bfbfd39c) at sendit+0x19d
sendto(c1ab49a0,d94a0d14,18,437,6) at sendto+0x5b
syscall(2f,2f,2f,bfbfd39c,20d) at syscall+0x275
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (133, FreeBSD ELF32, sendto), eip = 0x2813a1c7, esp = 0xbfbfd33c, ebp = 0xbfbfd3b8 ---
		
comments/references