Gentoo Archives: gentoo-hardened

From: Alex Xu <alex_y_xu@×××××.ca>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Problem with (?) hardened-sources-3.15.x on kvm-vm
Date: Tue, 26 Aug 2014 16:44:06
Message-Id: 53FCB952.8030202@yahoo.ca
In Reply to: Re: [gentoo-hardened] Problem with (?) hardened-sources-3.15.x on kvm-vm by Matthew Thode
1 On 26/08/14 11:13 AM, Matthew Thode wrote:
2 > On 08/26/2014 05:23 AM, Marcin Mirosław wrote:
3 >> Hello!
4 >> I suspect that I've got problem with hardened-sources in KVM VM. I'm not
5 >> sure if I should fill a bug for this. I'd like to post it here before
6 >> using b.g.o.
7 >> I've got VM (it's KVM with qemu-2.0.0-r1), with
8 >> hardened-sources-3.15.{5-r2,8}. I'm observing a kind of memory
9 >> corruption. After a couple of hours of uptime I'm starting seeing random
10 >> segfaults, general protection traps especially when process uses a lot
11 >> of CPU and do many I/O operations (masscheck scripts written in perl for
12 >> spamassasin rules).
13 >> In log I've got e.g.:
14 >>
15 >> 2014-08-25T13:05:23.243062+02:00 mohikanin kernel: [45571.239703] PAX:
16 >> From 88.198.102.195: execution attempt in: (null), 00000000-00000000
17 >> 00000000
18 >> 2014-08-25T13:05:23.243088+02:00 mohikanin kernel: [45571.239707] PAX:
19 >> terminating task: /usr/libexec/dovecot/pop3-login(pop3-login):2507,
20 >> uid/euid: 105/105, PC: (nil), SP: 000003a8574e4c00
21 >> 2014-08-25T13:05:23.243093+02:00 mohikanin kernel: [45571.239709] PAX:
22 >> bytes at PC: ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??
23 >> 2014-08-25T13:05:23.243095+02:00 mohikanin kernel: [45571.239735] PAX:
24 >> bytes at SP-8: 0000000000000000 0000000000000000 00000059c6deceb0
25 >> 0000000000000000 00000316027bc540 0000000000000001 000003160271dbb5
26 >> 0000000000000000 0000000000000000 0000000000000000 0000000000000000
27 >> 2014-08-25T13:24:42.943001+02:00 mohikanin kernel: [46730.931353] traps:
28 >> spamd child[19681] general protection ip:2c572b6e163 sp:3ca7d000be0
29 >> error:0 in libc-2.19.so[2c572aee000+19e000]
30 >> 2014-08-25T13:24:42.943007+02:00 mohikanin kernel: [46730.931371] grsec:
31 >> Segmentation fault occurred at (nil) in /usr/sbin/spamd[spamd
32 >> child:19681] uid/euid:999/999 gid/egid:100/100, parent
33 >> /usr/sbin/spamd[/usr/sbin/spamd:1255] uid/euid:0/0 gid/egid:0/0
34 >> 2014-08-25T13:55:22.383032+02:00 mohikanin kernel: [48570.375917] traps:
35 >> freshclam[6594] general protection ip:344cceb368d sp:3d5f5ced520 error:0
36 >> in libclamav.so.6.1.23[344ccdf1000+9d1000]
37 >> 2014-08-25T13:55:22.383050+02:00 mohikanin kernel: [48570.375968] grsec:
38 >> Segmentation fault occurred at (nil) in
39 >> /usr/bin/freshclam[freshclam:6594] uid/euid:104/104 gid/egid:115/115,
40 >> parent /usr/bin/freshclam[freshclam:1159] uid/euid:104/104 gid/egid:115/115
41 >>
42 >> Yesterday I switched kernel to gentoo-sources-3.14.14 and I don't see
43 >> any unwanted behavior. This is why I suspect hardened-sources. Should I
44 >> fill a bug? What should I do help find out the root of problem?
45 >> (gcc is: gcc version 4.7.3 (Gentoo Hardened 4.7.3-r1 p1.4, pie-0.5.5) ,
46 >> with ld.gold)
47 >>
48 >> Marcin
49 >>
50 >
51 > I'll test a 3.15.10-r1 kernel today sometime, anything I can do to
52 > reproduce specifically?
53 >
54 >
55
56 Run emerge boost. My setup is with PORTAGE_TMPDIR to hard drive, maybe
57 that affects repro.

Attachments

File name MIME type
signature.asc application/pgp-signature