Bug 589965 - oops in e1000_vlan_rx_kill_vid()
Summary: oops in e1000_vlan_rx_kill_vid()
Keywords:
Status: CLOSED DUPLICATE of bug 546740
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: kernel
Version: 5.5
Hardware: All
OS: Linux
low
medium
Target Milestone: rc
: ---
Assignee: Red Hat Kernel Manager
QA Contact: Red Hat Kernel QE team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-05-07 12:21 UTC by Vasily Averin
Modified: 2010-05-07 12:51 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-05-07 12:51:12 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Vasily Averin 2010-05-07 12:21:28 UTC
Description of problem:

crash because of incorrect backport of vlan_group_set_device() function:
implementation in compat headers do not checks first argument.
   drivers/net/e1000e/e1000_compat.h
   drivers/net/igb/igb_compat.h

Dear Andy,
Parallels/OpenVZ support team got bugreport with screenshot that shows oops in e1000_vlan_rx_kill_vid() in e1000e driver.

I've processed it and found following:
kernel was crashed inside
e1000_vlan_rx_kill_vid()
 vlan_group_set_device()

because of adapter->vlgrp was NULL.

IMHO it's possible for example when e1000_vlan_rx_kill_vid() is called from
 e1000_close() or from e1000_vlan_rx_register()

It happens because of backport of vlan_group_set_device() function does not check first argument.

Similar issue exists at least in igb driver too, when igb_vlan_rx_kill_vid() is called from igb_close() or from igb_vlan_rx_register()

Unfortunately I cannot provide clear error messages: I have only partially saved messages on screenshot. Also I was unable to reproduce issue locally.
On the other hand according to reporter it's reproducible issue. We're trying to get full oops messages and reproducer from him, and will update this bug when we'll got it.

Comment 1 Vasily Averin 2010-05-07 12:25:38 UTC
IMHO issue exists in2.6.18-194.el5 and .198.el5 RHEL5 kernels

Comment 2 Andy Gospodarek 2010-05-07 12:50:35 UTC
Thanks, Vasily.  We have plans to remove all of the *compat.h files in the network driver tree during this update cycle, so I hope to have all of these issues fixed in RHEL5.6.

Comment 3 Andy Gospodarek 2010-05-07 12:51:12 UTC

*** This bug has been marked as a duplicate of bug 546740 ***


Note You need to log in before you can comment on or make changes to this bug.