Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 520614

Summary: app-cdr/cdemu (kcdemu) doesn't work on hardened, CPU hangs
Product: Gentoo Linux Reporter: Andrey Aleksandrovich <andrey.aleksandrovich>
Component: HardenedAssignee: The Gentoo Linux Hardened Team <hardened>
Status: RESOLVED UPSTREAM    
Severity: normal    
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---
Attachments: emerge --info
0001-VHBA-copy-sense-data-via-temporary-buffer-on-stack-i.patch

Description Andrey Aleksandrovich 2014-08-22 16:03:24 UTC
Created attachment 383406 [details]
emerge --info

Hello, All!
I use KDE and kcdemu (kde gui for app-cdr/cdemu). When I run kcdemu it shows "Unable to connect to the CDEmu demon" in kde notification window.
And dmesg shows this:

[552.893438] scsi 7:0:0:0: CD-ROM CDEmu    Virt. CD/DVD-ROM 1.10 PQ: 0 ANSI: 0
[552.893645] PAX: kernel memory overwrite attempt detected to ffff880139f2c500 (scsi_sense_cache) (18 bytes)
[552.893656] CPU: 0 PID: 2582 Comm: I/O thread Tainted: GO  3.15.5-hardened-r2-gnu #3
[552.893663]  0000000000000000 ffff880139f2c500 ffffffff81766288 0000000000000012
[552.893669]  ffffffff81173302 ffff8800b3d9d200 0000000000000082 0000000000000086
[552.893674]  ffff8800aaae8000 ffff88013ab55720 ffff8800aaf4eac4 ffff880139f2c500
[552.893678] Call Trace:
[552.893688]  [<ffffffff81766288>] ? dump_stack+0x41/0x51
[552.893694]  [<ffffffff81173302>] ? __check_object_size+0x172/0x220
[552.893709]  [<ffffffffa01e67e6>] ? vhba_queuecommand+0x8a6/0xd88 [vhba]
[552.893715]  [<ffffffff811ae4e4>] ? fsnotify+0x234/0x300
[552.893720]  [<ffffffff8127c86a>] ? security_file_permission+0x2a/0xd0
[552.893725]  [<ffffffff8116d48b>] ? vfs_write+0x14b/0x280
[552.893728]  [<ffffffff8116da3f>] ? SyS_write+0x4f/0xc0
[552.893734]  [<ffffffff8176bb62>] ? system_call_fastpath+0x1a/0x1f
[552.934925] grsec: denied resource overstep by requesting 69632 for RLIMIT_MEMLOCK against limit 65536 for /usr/bin/knotify4[knotify4:2588] uid/euid:1000/1000 gid/egid:1000/1000, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0

During this one CPU core loads up to 100%. When I try to reboot system - the process of 'shutting down' hangs on OpenRC message "Remounting / read only".
After that 'hard reset' only helps.
Comment 1 Andrey Aleksandrovich 2014-09-28 16:17:35 UTC
Created attachment 385682 [details, diff]
0001-VHBA-copy-sense-data-via-temporary-buffer-on-stack-i.patch

The problem is in =sys-fs/vhba-20130607 the dependency of app-cdr/cdemu.
This patch is from cdemu-devel mailing list. So, FIXED -> UPSTREAM.