Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 414789 - www-client/chromium crash on >=sys-kernel/hardened-sources-3.3.0 when calling browser to open url
Summary: www-client/chromium crash on >=sys-kernel/hardened-sources-3.3.0 when calling...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Hardened (show other bugs)
Hardware: AMD64 Linux
: Normal normal (vote)
Assignee: The Gentoo Linux Hardened Kernel Team (OBSOLETE)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-05-05 20:10 UTC by Elis Axelsson
Modified: 2013-06-24 21:31 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
emerge --info chromium (emerge_info_of_chromium.log,12.57 KB, text/plain)
2012-05-05 20:10 UTC, Elis Axelsson
Details
Photo of the kernelpanic (chromium_kernelpanic_hardened_3.3.1.jpg,997.15 KB, image/jpeg)
2012-05-05 20:14 UTC, Elis Axelsson
Details
working kernelconfig (config-3.3.4-hardened,74.95 KB, text/plain)
2012-05-06 06:05 UTC, Elis Axelsson
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Elis Axelsson 2012-05-05 20:10:36 UTC
Created attachment 310915 [details]
emerge --info chromium

If CONFIG_PAX_KERNEXEC is enabled in the kernel, and you have chromium running. And then run
$ chromium http://gentoo.org/

in a terminal, the system will kernelpanic.
Comment 1 Elis Axelsson 2012-05-05 20:14:51 UTC
Created attachment 310917 [details]
Photo of the kernelpanic
Comment 2 PaX Team 2012-05-05 20:46:51 UTC
can you post your System.map or vmlinux as well please?
Comment 3 Elis Axelsson 2012-05-06 06:05:19 UTC
Created attachment 310931 [details]
working kernelconfig

The System.map file is >1000KB so I can't upload it to the bugtracker. Same with the kernel itself.

But this is my kernelconfig, with CONFIG_PAX_KERNEXEC disabled. When I enable CONFIG_PAX_KERNEXEC chromium will panic the kernel.

Same setup with CONFIG_PAX_KERNEXEC enabled worked in 3.2.* hardened.
Comment 4 PaX Team 2012-05-06 08:51:42 UTC
(In reply to comment #3)
> The System.map file is >1000KB so I can't upload it to the bugtracker. Same
> with the kernel itself.

you can try to compress them and/or email them directly to me ;). i really need these files to determine what read-only data was going to be modified.
Comment 5 Elis Axelsson 2012-05-06 09:28:44 UTC
(In reply to comment #4)
> (In reply to comment #3)
> > The System.map file is >1000KB so I can't upload it to the bugtracker. Same
> > with the kernel itself.
> 
> you can try to compress them and/or email them directly to me ;). i really
> need these files to determine what read-only data was going to be modified.

http://img.failar.nu/etu/kernel_and_systemmap.tar.bz2
Comment 6 PaX Team 2012-05-06 10:20:17 UTC
(In reply to comment #5)
> http://img.failar.nu/etu/kernel_and_systemmap.tar.bz2

thanks but these files are for 3.3.4, not 3.3.1. i need either the kernel files for the 3.3.1 kernel for which you posted the oops image initially or i need an oops image (or dmesg) for this 3.3.4 kernel.
Comment 7 Elis Axelsson 2012-05-06 10:53:32 UTC
(In reply to comment #6)
> (In reply to comment #5)
> > http://img.failar.nu/etu/kernel_and_systemmap.tar.bz2
> 
> thanks but these files are for 3.3.4, not 3.3.1. i need either the kernel
> files for the 3.3.1 kernel for which you posted the oops image initially or
> i need an oops image (or dmesg) for this 3.3.4 kernel.

http://img.failar.nu/etu/crash_with_3.3.4.tar.bz2

Crashing kernel config, Systemmap, kernel. Emerge --info, and a fresh photo.
Comment 8 PaX Team 2012-05-06 11:37:26 UTC
(In reply to comment #7)
> Crashing kernel config, Systemmap, kernel. Emerge --info, and a fresh photo.

cool, now i know that it was this page table being written to:

ffffffff817c4000 R level3_vmalloc_end_pgt

i'll fix this in the next patch, thanks for your help!
Comment 9 PaX Team 2012-05-08 12:09:51 UTC
can you test the latest grsec patch? (not sure if they're in hardened already but you can always get it from our site directly)
Comment 10 Anthony Basile gentoo-dev 2012-05-08 12:16:20 UTC
(In reply to comment #9)
> can you test the latest grsec patch? (not sure if they're in hardened
> already but you can always get it from our site directly)

It will be by this evening if my run tests succeed.

    hardened-sources-2.6.32-r103 = grsecurity-2.9-2.6.32.59-201205071838

    hardened-sources-3.2.16-r2 = grsecurity-2.9-3.2.16-201205071838

    hardened-sources-3.3.5 = grsecurity-2.9-3.3.5-201205071839
Comment 11 Elis Axelsson 2012-05-09 16:01:42 UTC
(In reply to comment #9)
> can you test the latest grsec patch? (not sure if they're in hardened
> already but you can always get it from our site directly)

It works with =sys-kernel/hardened-sources-3.3.5, with CONFIG_PAX_KERNEXEC enabled.
Comment 12 Paolo Barile 2012-06-21 14:33:39 UTC
Differently from what the bug title says, I can confirm that even the stable version of hardened-sources (=sys-kernel/hardened-sources-3.2.11) is affected by this bug with both google-chrome and chromium 19.0.1084.56.
Upgrading to ~amd64 keyworded version =sys-kernel/hardened-sources-3.3.8, everything works fine.
Comment 13 PaX Team 2012-06-21 19:27:52 UTC
(In reply to comment #12)
> Differently from what the bug title says, I can confirm that even the stable
> version of hardened-sources (=sys-kernel/hardened-sources-3.2.11) is
> affected by this bug with both google-chrome and chromium 19.0.1084.56.
> Upgrading to ~amd64 keyworded version =sys-kernel/hardened-sources-3.3.8,
> everything works fine.

3.2.11 is too old to have the fix, i hope 3.2.20+ gets stabilized sooner than later ;).