February 2017 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1010844] New: Leap 42.2 - LibreOffice crashes after turning OpenGL on
by bugzilla_noreply＠novell.com 03 Feb '17

03 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1010844 Bug ID: 1010844 Summary: Leap 42.2 - LibreOffice crashes after turning OpenGL on Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: x86-64 OS: All Status: NEW Severity: Normal Priority: P5 - None Component: LibreOffice Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: itaranto7(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- LibreOffice crashes after turning on OpenGL and restarting. Reproducibility 100%. My system is running Leap 42.2 with KDE Plasma 5, I' running NVIDIA proprietary drivers and my graphic card is a GeForce GTX 650. This issue was not present on Leap 42.1 with LibreOffice's default version on the same hardware. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1022053] mozilla/mozilla-nss: libfreebl3 3.28.1 and libsoftokn3 3.28.1 cause the JVM to crash when using sun.security.ec.ECKeyPairGenerator
by bugzilla_noreply＠novell.com 03 Feb '17

03 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1022053 http://bugzilla.suse.com/show_bug.cgi?id=1022053#c12 --- Comment #12 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2017:0374-1: An update that fixes 14 vulnerabilities is now available. Category: security (important) Bug References: 1020905,1022053 CVE References: CVE-2016-2183,CVE-2016-5546,CVE-2016-5547,CVE-2016-5548,CVE-2016-5549,CVE-2016-5552,CVE-2017-3231,CVE-2017-3241,CVE-2017-3252,CVE-2017-3253,CVE-2017-3260,CVE-2017-3261,CVE-2017-3272,CVE-2017-3289 Sources used: openSUSE Leap 42.2 (src): java-1_8_0-openjdk-1.8.0.121-6.4 openSUSE Leap 42.1 (src): java-1_8_0-openjdk-1.8.0.121-21.4 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 904015] outlined fonts didn't get their antialias enabled by fontconfig in openSUSE 13.2 and above
by bugzilla_noreply＠novell.com 03 Feb '17

03 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=904015 http://bugzilla.suse.com/show_bug.cgi?id=904015#c51 --- Comment #51 from Petr Gajdos <pgajdos(a)suse.com> --- JFYI.. (In reply to Marguerite Su from comment #46) > <match target="font"> > <test compare="more_eq" name="size" qual="any"> > <double>0</double> > </test> > <test compare="less_eq" name="size" qual="any"> > <double>8</double> > </test> > <edit mode="assign" name="antialias"> > <bool>false</bool> > </edit> > </match> > <match target="font"> > <test compare="more_eq" name="pixelsize" qual="any"> > <double>0</double> > </test> > <test compare="less_eq" name="pixelsize" qual="any"> > <double>11</double> > </test> > <edit mode="assign" name="antialias"> > <bool>false</bool> > </edit> > </match> They probably assume/had detected dpi=96: On my system: $ fc-match -v sans:size=8 | grep 'dpi\|size' Pattern has 44 elts (size 48) size: 8(f)(s) pixelsize: 8.33333(f)(s) dpi: 75(f)(s) $ For requested dpi=96: $ fc-match -v sans:size=8:dpi=96 | grep 'dpi\|size' Pattern has 44 elts (size 48) size: 8(f)(s) pixelsize: 10.6667(f)(s) dpi: 96(f)(s) $ Not sure why they add both checks, but the 'size' could perhaps be more appropriate than on 'pixelsize' I offered in comment 45. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1023390] change "Installation Settings" string to "Summary"
by bugzilla_noreply＠novell.com 03 Feb '17

03 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1023390 http://bugzilla.suse.com/show_bug.cgi?id=1023390#c1 Josef Reidinger <jreidinger(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jreidinger(a)suse.com, | |wimer(a)suse.com Flags| |needinfo?(wimer(a)suse.com) --- Comment #1 from Josef Reidinger <jreidinger(a)suse.com> --- Ken - as this change will affect also SLE, what is your view about this change? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1013605] New: [Build 20161203] openQA test fails in installation (autoyast tests)
by bugzilla_noreply＠novell.com 03 Feb '17

03 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1013605 Bug ID: 1013605 Summary: [Build 20161203] openQA test fails in installation (autoyast tests) Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: http://openqa.opensuse.org/tests/314361/modules/instal lation/steps/15 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: dimstar(a)opensuse.org QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- ## Observation openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-autoyast_gnome@64bit fails in [installation](http://openqa.opensuse.org/tests/314361/modules/installation/… ## Reproducible Fails since (at least) Build [20161203](http://openqa.opensuse.org/tests/314132) This snapshot was the first to include yast2-network 3.2.15 (previous 3.2.11) which introduced the new handling of 'update hostname by dhcp' ## Expected result Last good: [20161202](http://openqa.opensuse.org/tests/313869) (or more recent) ## Further details Always latest result in this scenario: [latest](http://openqa.opensuse.org/tests/latest?test=autoyast_gnome&version… -- You are receiving this mail because: You are on the CC list for the bug.

1 22

[Bug 1023296] ncurses-devel misses a dependency on libncurses5
by bugzilla_noreply＠novell.com 03 Feb '17

03 Feb '17

http://bugzilla.suse.com/show_bug.cgi?id=1023296 http://bugzilla.suse.com/show_bug.cgi?id=1023296#c4 Dr. Werner Fink <werner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS CC| |dimstar(a)opensuse.org Flags| |needinfo?(dimstar@opensuse. | |org) --- Comment #4 from Dr. Werner Fink <werner(a)suse.com> --- How does this perform? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1023380] New: VUL-1: podofo: heap-based buffer overflow in PoDoFo::PdfTokenizer::GetNextToken (PdfTokenizer.cpp)
by bugzilla_noreply＠novell.com 03 Feb '17

03 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1023380 Bug ID: 1023380 Summary: VUL-1: podofo: heap-based buffer overflow in PoDoFo::PdfTokenizer::GetNextToken (PdfTokenizer.cpp) Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Ref: http://seclists.org/oss-sec/2017/q1/301 =============================================== Description: podofo is a C++ library to work with the PDF file format. A fuzz on it discovered an heap overflow. The upstream project denies me to open a new ticket. So, I’m unable to communicate with them. This will probably forwarded the the -users mailing list. The complete ASan output: # podofopdfinfo $FILE ==13498==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x62100001dd00 at pc 0x7fdb98e8ab81 bp 0x7ffcef268950 sp 0x7ffcef268948 WRITE of size 1 at 0x62100001dd00 thread T0 #0 0x7fdb98e8ab80 in PoDoFo::PdfTokenizer::GetNextToken(char const*&, PoDoFo::EPdfTokenType*) /tmp/portage/app- text/podofo-0.9.4/work/podofo-0.9.4/src/base/PdfTokenizer.cpp:319:35 #1 0x7fdb98e8bb56 in PoDoFo::PdfTokenizer::GetNextNumber() /tmp/portage/app- text/podofo-0.9.4/work/podofo-0.9.4/src/base/PdfTokenizer.cpp:356:27 #2 0x7fdb98e57903 in PoDoFo::PdfParserObject::ReadObjectNumber() /tmp/portage/app- text/podofo-0.9.4/work/podofo-0.9.4/src/base/PdfParserObject.cpp:105:30 #3 0x7fdb98e58d00 in PoDoFo::PdfParserObject::ParseFile(PoDoFo::PdfEncrypt*, bool) /tmp/portage/app- text/podofo-0.9.4/work/podofo-0.9.4/src/base/PdfParserObject.cpp:134:9 #4 0x7fdb98e38c91 in PoDoFo::PdfParser::ReadTrailer() /tmp/portage/app- text/podofo-0.9.4/work/podofo-0.9.4/src/base/PdfParser.cpp:603:56 #5 0x7fdb98e33127 in PoDoFo::PdfParser::ReadDocumentStructure() /tmp/portage/app- text/podofo-0.9.4/work/podofo-0.9.4/src/base/PdfParser.cpp:283:9 #6 0x7fdb98e30e0f in PoDoFo::PdfParser::ParseFile(PoDoFo::PdfRefCountedInputDevice const&, bool) /tmp/portage/app- text/podofo-0.9.4/work/podofo-0.9.4/src/base/PdfParser.cpp:220:9 #7 0x7fdb98e2f1d4 in PoDoFo::PdfParser::ParseFile(char const*, bool) /tmp/portage/app- text/podofo-0.9.4/work/podofo-0.9.4/src/base/PdfParser.cpp:164:11 #8 0x7fdb9908c3f3 in PoDoFo::PdfMemDocument::Load(char const*) /tmp/portage/app- text/podofo-0.9.4/work/podofo-0.9.4/src/doc/PdfMemDocument.cpp:186:16 #9 0x50e8cb in count_pages(char const*, bool const&) /tmp/portage/app- text/podofo-0.9.4/work/podofo-0.9.4/tools/podofocountpages/countpages.cpp:45:14 #10 0x50ecd6 in main /tmp/portage/app- text/podofo-0.9.4/work/podofo-0.9.4/tools/podofocountpages/countpages.cpp:86:24 #11 0x7fdb97a6861f in __libc_start_main /var/tmp/portage/sys- libs/glibc-2.22-r4/work/glibc-2.22/csu/libc-start.c:289 #12 0x41b5a8 in _start (/usr/bin/podofocountpages+0x41b5a8) 0x62100001dd00 is located 0 bytes to the right of 4096-byte region [0x62100001cd00,0x62100001dd00) allocated by thread T0 here: #0 0x4d4565 in calloc /tmp/portage/sys-devel/llvm-3.9.0- r1/work/llvm-3.9.0.src/projects/compiler-rt/lib/asan/asan_malloc_linux.cc:72 #1 0x7fdb98e17989 in PoDoFo::podofo_calloc(unsigned long, unsigned long) /tmp/portage/app- text/podofo-0.9.4/work/podofo-0.9.4/src/base/PdfMemoryManagement.cpp:139:9 #2 0x7fdb98e621f8 in PoDoFo::PdfRefCountedBuffer::ReallyResize(unsigned long) /tmp/portage/app- text/podofo-0.9.4/work/podofo-0.9.4/src/base/PdfRefCountedBuffer.cpp:166:59 #3 0x7fdb98e86044 in PoDoFo::PdfRefCountedBuffer::Resize(unsigned long) /tmp/portage/app- text/podofo-0.9.4/work/podofo-0.9.4/src/base/PdfRefCountedBuffer.h:307:9 #4 0x7fdb98e86044 in PoDoFo::PdfRefCountedBuffer::PdfRefCountedBuffer(unsigned long) /tmp/portage/app- text/podofo-0.9.4/work/podofo-0.9.4/src/base/PdfRefCountedBuffer.h:227 #5 0x7fdb98e86044 in PoDoFo::PdfTokenizer::PdfTokenizer() /tmp/portage/app- text/podofo-0.9.4/work/podofo-0.9.4/src/base/PdfTokenizer.cpp:186 #6 0x7fdb98e2debe in PoDoFo::PdfParser::PdfParser(PoDoFo::PdfVecObjects*) /tmp/portage/app- text/podofo-0.9.4/work/podofo-0.9.4/src/base/PdfParser.cpp:76:7 #7 0x7fdb9908c3a5 in PoDoFo::PdfMemDocument::Load(char const*) /tmp/portage/app- text/podofo-0.9.4/work/podofo-0.9.4/src/doc/PdfMemDocument.cpp:185:21 #8 0x50e8cb in count_pages(char const*, bool const&) /tmp/portage/app- text/podofo-0.9.4/work/podofo-0.9.4/tools/podofocountpages/countpages.cpp:45:14 #9 0x50ecd6 in main /tmp/portage/app- text/podofo-0.9.4/work/podofo-0.9.4/tools/podofocountpages/countpages.cpp:86:24 #10 0x7fdb97a6861f in __libc_start_main /var/tmp/portage/sys- libs/glibc-2.22-r4/work/glibc-2.22/csu/libc-start.c:289 SUMMARY: AddressSanitizer: heap-buffer-overflow /tmp/portage/app- text/podofo-0.9.4/work/podofo-0.9.4/src/base/PdfTokenizer.cpp:319:35 in PoDoFo::PdfTokenizer::GetNextToken(char const*&, PoDoFo::EPdfTokenType*) Shadow bytes around the buggy address: 0x0c427fffbb50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c427fffbb60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c427fffbb70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c427fffbb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c427fffbb90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 =>0x0c427fffbba0:[fa]fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c427fffbbb0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c427fffbbc0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c427fffbbd0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c427fffbbe0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c427fffbbf0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap right redzone: fb Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==13498==ABORTING Affected version: 0.9.4 Fixed version: N/A Commit fix: N/A Credit: This bug was discovered by Agostino Sarubbo of Gentoo. CVE: N/A Reproducer: https://github.com/asarubbo/poc/blob/master/00146-podofo-heapoverflow-PdfTo… Timeline: 2017-02-02: bug discovered 2017-02-03: blog post about the issue Note: This bug was found with American Fuzzy Lop. Permalink: https://blogs.gentoo.org/ago/2017/02/03/podofo-heap-based-buffer-overflow-i… -- Agostino Sarubbo Gentoo Linux Developer =============================================== -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 949756] New: D-Bus NetworkManager configuration file uses non-existent user srvGeoClue
by bugzilla_noreply＠novell.com 03 Feb '17

03 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=949756 Bug ID: 949756 Summary: D-Bus NetworkManager configuration file uses non-existent user srvGeoClue Classification: openSUSE Product: openSUSE Distribution Version: 13.2 Hardware: x86-64 OS: openSUSE 13.2 Status: NEW Severity: Normal Priority: P5 - None Component: KDE4 Workspace Assignee: kde-maintainers(a)suse.de Reporter: donald(a)curtisliberty.de QA Contact: qa-bugs(a)suse.de CC: fstrba(a)suse.com, thiago(a)kde.org Depends on: 932362 Found By: --- Blocker: --- +++ This bug was initially created as a clone of Bug #932362 +++ At boot time the first dbus-daemon journal entry is: Unknown username "srvGeoClue" in message bus configuration file See Build Service Request 223859. Simple fix: install the package geoclue2 and then remove it -- the system user "srvGeoClue" remains. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 932362] New: D-Bus prints warning due to faulty NetworkManager config file
by bugzilla_noreply＠novell.com 03 Feb '17

03 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=932362 Bug ID: 932362 Summary: D-Bus prints warning due to faulty NetworkManager config file Classification: openSUSE Product: openSUSE Distribution Version: 13.2 Hardware: Other OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Network Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: thiago(a)kde.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Every time the system dbus-daemon reloads its configuration, it prints the following warning to syslog: dbus-daemon[1147]: Unknown username "srvGeoClue" in message bus configuration file That is caused by https://build.opensuse.org/package/view_file/openSUSE:Factory/NetworkManage… added in commit https://build.opensuse.org/request/show/223859. The warning happens when you don't have geoclue installed. The patch is a big hammer for a problem that should be fixed in GeoClue's side. Please move any required D-Bus rules to its package, to be installed if and only if GeoClue itself is installed. It would also be nice to work with upstream to make sure that they're not making calls they shouldn't be making. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1023377] New: VUL-0: kernel-source: EXT4 Memory Corruption / SLAB-Out-of-Bounds Read [OS-S 2016-22]
by bugzilla_noreply＠novell.com 03 Feb '17

03 Feb '17

http://bugzilla.opensuse.org/show_bug.cgi?id=1023377 Bug ID: 1023377 Summary: VUL-0: kernel-source: EXT4 Memory Corruption / SLAB-Out-of-Bounds Read [OS-S 2016-22] Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: mikhail.kasimov(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Refs: [1] http://seclists.org/oss-sec/2017/q1/298 [2] http://seclists.org/fulldisclosure/2016/Nov/75 [3]: https://bugzilla.redhat.com/show_bug.cgi?id=1332503 [1]: ================================================== Gday, I'd like to ask for a CVE for the flaw the EXT4 filesystem as described as: Mounting a crafted EXT4 image read-only leads to a memory corruption and SLAB-Out-of-Bounds Reads (according to KASAN). Since the mounting procedure is a privileged operation, an attacker is probably not able to trigger this vulnerability on the commandline. Instead the automatic mounting feature of the GUI via a crafted USB-device is required. From full disclosure at: http://seclists.org/fulldisclosure/2016/Nov/75 If it has been assigned elsewhere, I am unable to see it. Thanks, Wade Mealing Red Hat Product Security ================================================== [2] ================================================== OS-S Security Advisory 2016-22 Local DoS: Linux Kernel EXT4 Memory Corruption / SLAB-Out-of-Bounds Read Date: October 31th, 2016 Authors: Sergej Schumilo, Ralf Spenneberg CVE: Not yet assigned CVSS: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C) Severity: Critical Ease of Exploitation: Trivial Vulnerability Type: Memory Corruption / SLAB-Out-of-Bounds Read Abstract: Mounting a crafted EXT4 image read-only leads to a memory corruption and SLAB-Out-of-Bounds Reads (according to KASAN). Since the mounting procedure is a privileged operation, an attacker is probably not able to trigger this vulnerability on the commandline. Instead the automatic mounting feature of the GUI via a crafted USB-device is required. Detailed product description: We have verified the bug on the following kernel builds: Ubuntu Server 16.10 (GNU/Linux 4.8.0-22-generic x86_64) RedHat Kernel 3.10.0-327.18.2.el7.x86_64 Vendor Communication: We contacted RedHat on May, 03th 2016. To this day, no security patch was provided by the vendor. We publish this Security Advisory in accordance with our responsible disclosure policy. Reference: https://bugzilla.redhat.com/show_bug.cgi?id=1332503 Proof of Concept: As a proof of concept, we are providing the image that is causing the memory corruption / use-after-free. For demonstration purposes a script to mount this filesystem is also attached. Severity and Ease of Exploitation: The vulnerability can be easily exploited as a Denial-of-Service remotely by using a USB-device. In this case the attacker must copy this image (e.g. using dd) to a device or storage such as a SD-card which can be set to read-only mode (using the write-protection switch). Mount-Script: cp ext4_fs_file /tmp/ mkdir /tmp/a losetup /dev/loop0 /tmp/ext4_fs_file mount -o ro /dev/loop0 /tmp/a Malicious EXT4-Image: https://os-s.net/advisories/OSS-2016-22-image KASAN-Report: https://os-s.net/advisories/OSS-2016-22-KASAN dmesg-Report: / # ./mount.sh [ 56.421839] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (25303!=248) [ 56.437702] BUG: unable to handle kernel paging request at ffff880016161000 [ 56.446533] IP: [<ffffffffc005aa6f>] ext4_calculate_overhead+0x29f/0x370 [ext4] [ 56.454410] PGD 1fee067 PUD 1fef067 PMD 16160063 BAD [ 56.461593] Oops: 000b [#1] SMP [ 56.467235] Modules linked in: ext4(OE) mbcache(E) jbd2(E) [ 56.476475] CPU: 0 PID: 145 Comm: mounter Tainted: G OE 4.6.0-rc6 #4 [ 56.486022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.8.2-0-g33fbe13 by qemu-project.org 04/01/2014 [ 56.503885] task: ffff88001ee33300 ti: ffff88001e850000 task.ti: ffff88001e850000 [ 56.514936] RIP: 0010:[<ffffffffc005aa6f>] [<ffffffffc005aa6f>] ext4_calculate_overhead+0x29f/0x370 [ext4] [ 56.528848] RSP: 0018:ffff88001e853c38 EFLAGS: 00010297 [ 56.536256] RAX: 0000000032323200 RBX: ffff88001613c000 RCX: 0000000000000000 [ 56.546277] RDX: 0000000000128000 RSI: 0000000000128001 RDI: 0000000032323201 [ 56.556046] RBP: ffff88001e853c98 R08: ffff8800160b8400 R09: 0000000000000000 [ 56.565942] R10: ffff88001ee85000 R11: ffff88001ee84800 R12: ffff88001ee85000 [ 56.575833] R13: 0000000000000005 R14: 0000000000000000 R15: 0000000000000000 [ 56.587260] FS: 00007fc4e7e6f700(0000) GS:ffff88001e400000(0000) knlGS:0000000000000000 [ 56.597788] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.607823] CR2: ffff880016160b08 CR3: 000000000011b000 CR4: 00000000000006f0 [ 56.618769] Stack: [ 56.622341] ffff88001ee85000 0000000000000000 0000000100000001 0000000000000000 [ 56.634376] 0000000000000001 ffff88001ee84800 0000000000001fff 0000000000000001 [ 56.645606] ffff8800160b8400 0000000000000000 ffff88001ee84800 ffff88001ee85000 [ 56.656883] Call Trace: [ 56.660786] [<ffffffffc005c6c5>] ext4_fill_super+0x1b85/0x32c0 [ext4] [ 56.669671] [<ffffffff81367579>] ? snprintf+0x39/0x40 [ 56.676400] [<ffffffff8120688b>] mount_bdev+0x17b/0x1b0 [ 56.682302] [<ffffffffc005ab40>] ? ext4_calculate_overhead+0x370/0x370 [ext4] [ 56.694070] [<ffffffffc004c935>] ext4_mount+0x15/0x20 [ext4] [ 56.701554] [<ffffffff812071b8>] mount_fs+0x38/0x160 [ 56.708763] [<ffffffff811a6245>] ? __alloc_percpu+0x15/0x20 [ 56.717214] [<ffffffff81222847>] vfs_kern_mount+0x67/0x110 [ 56.723703] [<ffffffff81224fe8>] do_mount+0x228/0xdc0 [ 56.731254] [<ffffffff811e4e01>] ? __kmalloc_track_caller+0x31/0x220 [ 56.741002] [<ffffffff811a0ab2>] ? memdup_user+0x42/0x70 [ 56.748223] [<ffffffff81225ea5>] SyS_mount+0x95/0xe0 [ 56.756591] [<ffffffff817b6176>] entry_SYSCALL_64_fastpath+0x1e/0xa8 [ 56.766191] Code: 4c 89 5d c8 89 55 b4 e8 c0 60 fd ff 85 c0 4c 8b 5d c8 0f 8e 46 ff ff ff 8b 55 b4 8d 3c 02 41 8b 4c 24 54 8d 72 01 d3 fa 48 63 d2 <48> 0f ab 13 39 fe 89 f2 75 e9 41 01 c5 e9 21 ff ff ff 49 8b 83 [ 56.800243] RIP [<ffffffffc005aa6f>] ext4_calculate_overhead+0x29f/0x370 [ext4] [ 56.811328] RSP <ffff88001e853c38> [ 56.816875] CR2: ffff880016161000 [ 56.821488] ---[ end trace 70027566e5b28840 ]--- [ 56.826472] BUG: unable to handle kernel paging request at ffff8800160b6100 [ 56.834290] IP: [<ffffffff810b4257>] task_tick_fair+0x4a7/0x980 [ 56.842839] PGD 1fee067 PUD 1fef067 PMD 16160063 BAD [ 56.850310] Oops: 000b [#2] SMP [ 56.856901] Modules linked in: ext4(OE) mbcache(E) jbd2(E) [ 56.865616] CPU: 0 PID: 145 Comm: mounter Tainted: G D OE 4.6.0-rc6 #4 [ 56.875621] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.8.2-0-g33fbe13 by qemu-project.org 04/01/2014 [ 56.892863] task: ffff88001ee33300 ti: ffff88001e850000 task.ti: ffff88001e850000 [ 56.902648] RIP: 0010:[<ffffffff810b4257>] [<ffffffff810b4257>] task_tick_fair+0x4a7/0x980 [ 56.914488] RSP: 0018:ffff88001e403dd0 EFLAGS: 00010002 [ 56.922043] RAX: fffffffffffffda2 RBX: ffff88001e87a000 RCX: 000000000000025e [ 56.932215] RDX: 0000000000000019 RSI: ffff88001e416c40 RDI: ffff8800160b6000 [ 56.940606] RBP: ffff88001e403e48 R08: ffffffffffffffff R09: 0000000000000001 [ 56.952012] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000005e99 [ 56.961436] R13: 00000000000000f0 R14: ffff88001ee33380 R15: ffff88001e87a000 [ 56.968021] FS: 00007fc4e7e6f700(0000) GS:ffff88001e400000(0000) knlGS:0000000000000000 [ 56.980306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.987740] CR2: ffff8800161605b0 CR3: 000000000011b000 CR4: 00000000000006f0 [ 56.995946] Stack: [ 56.997897] 0000000000000000 ffff88001ee33300 ffff88001e416c40 0000000000005eaa [ 57.007230] ffff880000000000 0000000000000400 ffff880000000000 ffff88001e416c40 [ 57.017866] 000000001e403e30 ffff88001ee33380 ffff88001e416c40 0000000000016c40 [ 57.024945] Call Trace: [ 57.027693] <IRQ> [ 57.030393] [<ffffffff810a643c>] scheduler_tick+0x5c/0xd0 [ 57.036102] [<ffffffff810f5060>] ? tick_sched_handle.isra.13+0x60/0x60 [ 57.043808] [<ffffffff810e5be1>] update_process_times+0x51/0x60 [ 57.050493] [<ffffffff810f5025>] tick_sched_handle.isra.13+0x25/0x60 [ 57.058897] [<ffffffff810f509d>] tick_sched_timer+0x3d/0x70 [ 57.065082] [<ffffffff810e6464>] __hrtimer_run_queues+0xe4/0x250 [ 57.070516] [<ffffffff810e6bd8>] hrtimer_interrupt+0xa8/0x1a0 [ 57.077781] [<ffffffff8104f948>] local_apic_timer_interrupt+0x38/0x60 [ 57.083346] [<ffffffff817b89ed>] smp_apic_timer_interrupt+0x3d/0x50 [ 57.091424] [<ffffffff817b6d62>] apic_timer_interrupt+0x82/0x90 [ 57.099326] <EOI> [ 57.102170] [<ffffffff81102911>] ? acct_collect+0x171/0x1a0 [ 57.109009] [<ffffffff8107eb4b>] do_exit+0x4db/0xb10 [ 57.115915] [<ffffffff8102fa93>] oops_end+0xa3/0xd0 [ 57.122250] [<ffffffff810666b0>] no_context+0x110/0x370 [ 57.129398] [<ffffffff81066991>] __bad_area_nosemaphore+0x81/0x200 [ 57.138090] [<ffffffff81066b24>] bad_area_nosemaphore+0x14/0x20 [ 57.146376] [<ffffffff81066ec0>] __do_page_fault+0xc0/0x4c0 [ 57.153429] [<ffffffff811e0015>] ? new_slab+0x3b5/0x5d0 [ 57.163147] [<ffffffff81067327>] trace_do_page_fault+0x37/0xd0 [ 57.169386] [<ffffffff8105fa99>] do_async_page_fault+0x19/0x70 [ 57.174572] [<ffffffff817b8118>] async_page_fault+0x28/0x30 [ 57.181017] [<ffffffffc005aa6f>] ? ext4_calculate_overhead+0x29f/0x370 [ext4] [ 57.188992] [<ffffffffc005aa50>] ? ext4_calculate_overhead+0x280/0x370 [ext4] [ 57.196489] [<ffffffffc005c6c5>] ext4_fill_super+0x1b85/0x32c0 [ext4] [ 57.205539] [<ffffffff81367579>] ? snprintf+0x39/0x40 [ 57.211646] [<ffffffff8120688b>] mount_bdev+0x17b/0x1b0 [ 57.218941] [<ffffffffc005ab40>] ? ext4_calculate_overhead+0x370/0x370 [ext4] [ 57.228329] [<ffffffffc004c935>] ext4_mount+0x15/0x20 [ext4] [ 57.234328] [<ffffffff812071b8>] mount_fs+0x38/0x160 [ 57.240946] [<ffffffff811a6245>] ? __alloc_percpu+0x15/0x20 [ 57.246275] [<ffffffff81222847>] vfs_kern_mount+0x67/0x110 [ 57.250890] [<ffffffff81224fe8>] do_mount+0x228/0xdc0 [ 57.255725] [<ffffffff811e4e01>] ? __kmalloc_track_caller+0x31/0x220 [ 57.261346] [<ffffffff811a0ab2>] ? memdup_user+0x42/0x70 [ 57.266554] [<ffffffff81225ea5>] SyS_mount+0x95/0xe0 [ 57.274193] [<ffffffff817b6176>] entry_SYSCALL_64_fastpath+0x1e/0xa8 [ 57.280765] Code: 8b bb e8 00 00 00 48 29 d0 48 81 ff 00 eb ee 81 74 2c 49 89 c0 48 c1 ea 06 49 c1 f8 3f 4c 89 c1 48 31 c1 4c 29 c1 48 39 d1 76 13 <3e> 48 01 87 00 01 00 00 48 8b 43 78 48 89 83 98 00 00 00 65 8b [ 57.312620] RIP [<ffffffff810b4257>] task_tick_fair+0x4a7/0x980 [ 57.319317] RSP <ffff88001e403dd0> [ 57.322494] CR2: ffff8800160b6100 [ 57.326972] ---[ end trace 70027566e5b28841 ]--- [ 57.333540] Kernel panic - not syncing: Fatal exception in interrupt [ 57.346993] Kernel Offset: disabled [ 57.350049] Rebooting in 1 seconds.. -- OpenSource Training Ralf Spenneberg http://www.os-t.de Am Bahnhof 3-5 48565 Steinfurt Germany Fon: +49(0)2552 638 755 Fax: +49(0)2552 638 757 ================================================== -- You are receiving this mail because: You are on the CC list for the bug.

1 0