Bug 79761 - PAX: size overflow detected in function HYPERVISOR_event_channel_op linux-3.15.3/arch/x86/include/asm/xen/hypercall.h:367 cicus.411_18 max
Summary: PAX: size overflow detected in function HYPERVISOR_event_channel_op linux-3.1...
Status: RESOLVED INVALID
Alias: None
Product: Virtualization
Classification: Unclassified
Component: Xen (show other bugs)
Hardware: All Linux
: P1 normal
Assignee: virtualization_xen
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-07-09 20:04 UTC by Joonas
Modified: 2014-07-14 07:00 UTC (History)
0 users

See Also:
Kernel Version: 3.15.3-grsec
Subsystem:
Regression: No
Bisected commit-id:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Joonas 2014-07-09 20:04:57 UTC 
PAX detected a overflow when booting a PV guest:


[    0.000000] PAX: size overflow detected in function HYPERVISOR_event_channel_op /home/user/rpmbuild/BUILD/kernel-3.15.3/linux-3.15.3/arch/x86/include/asm/xen/hypercall.h:367 cicus.411_18 max, count: 1
[    0.000000] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 3.15.3-mini3grsec2.pvops.x86_64 #1
[    0.000000]  0000000000000000 ffffffff8188fec8 ffffffff8145d9ac 0000000000000000
[    0.000000]  ffffffff8188fed8 ffffffff81179a04 ffffffff8188fef8 ffffffff812c1f02
[    0.000000]  0000000000000003 ffff88001840ae40 ffffffff8188ff38 ffffffff8100a7f7
[    0.000000] Call Trace:
[    0.000000]  [<ffffffff8145d9ac>] dump_stack+0x45/0x56
[    0.000000]  [<ffffffff81179a04>] report_size_overflow+0x24/0x30
[    0.000000]  [<ffffffff812c1f02>] xen_set_irq_priority+0x52/0xd0
[    0.000000]  [<ffffffff8100a7f7>] xen_setup_timer+0x97/0x130
[    0.000000]  [<ffffffff81d798f8>] xen_time_init+0xa6/0xc0
[    0.000000]  [<ffffffff81d7be46>] x86_late_time_init+0xa/0x11
[    0.000000]  [<ffffffff81d75ebc>] start_kernel+0x422/0x4a1
[    0.000000]  [<ffffffff81d758a6>] ? repair_env_string+0x60/0x60
[    0.000000]  [<ffffffff81d75545>] x86_64_start_reservations+0x2a/0x2c
[    0.000000]  [<ffffffff81d78319>] xen_start_kernel+0x479/0x480
[    0.000000] Kernel panic - not syncing: Attempted to kill the idle task!
[    0.000000] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 3.15.3-mini3grsec2.pvops.x86_64 #1
[    0.000000]  0000000000000009 ffffffff8188fd98 ffffffff8145d9ac ffffffff817e9720
[    0.000000]  ffffffff8188fe10 ffffffff81457151 0000000000000008 ffffffff8188fe20
[    0.000000]  ffffffff8188fdc0 0000000000000000 0000000000000000 ffffffff8189c960
[    0.000000] Call Trace:
[    0.000000]  [<ffffffff8145d9ac>] dump_stack+0x45/0x56
[    0.000000]  [<ffffffff81457151>] panic+0xcf/0x1ee
[    0.000000]  [<ffffffff81059d4f>] do_exit+0x9ef/0xa50
[    0.000000]  [<ffffffff8101584f>] ? show_stack_log_lvl+0x8f/0x170
[    0.000000]  [<ffffffff8105acd7>] do_group_exit+0x47/0xc0
[    0.000000]  [<ffffffff81179a0e>] report_size_overflow+0x2e/0x30
[    0.000000]  [<ffffffff812c1f02>] xen_set_irq_priority+0x52/0xd0
[    0.000000]  [<ffffffff8100a7f7>] xen_setup_timer+0x97/0x130
[    0.000000]  [<ffffffff81d798f8>] xen_time_init+0xa6/0xc0
[    0.000000]  [<ffffffff81d7be46>] x86_late_time_init+0xa/0x11
[    0.000000]  [<ffffffff81d75ebc>] start_kernel+0x422/0x4a1
[    0.000000]  [<ffffffff81d758a6>] ? repair_env_string+0x60/0x60
[    0.000000]  [<ffffffff81d75545>] x86_64_start_reservations+0x2a/0x2c
[    0.000000]  [<ffffffff81d78319>] xen_start_kernel+0x479/0x480
Comment 1 Joonas 2014-07-14 07:00:49 UTC 
This is a false positive of PAX - closed.
Note You need to log in before you can comment on or make changes to this bug.