Re: IPv6 related BUG (./net/ipv6/exthdrs_core.c:ipv6_skip_exthdr())

[Stephen Smalley <sds@tycho.nsa.gov>]

On Thu, 2005-06-09 at 12:30 +0200, Jan-Benedict Glaw wrote:
> Hi!
> 
> My bind wasn't working and this showed up in dmesg:
> 
>  ------------[ cut here ]------------
> kernel BUG at net/ipv6/exthdrs_core.c:80!
> invalid operand: 0000 [#1]
> SMP 
> Modules linked in: sd_mod capability commoncap ipt_REJECT iptable_filter ip_tables e100 floppy dm_mod pcspkr psmouse genrtc unix
> CPU:    1
> EIP:    0060:[<c02f8556>]    Not tainted VLI
> EFLAGS: 00010246   (2.6.11.10lug-owl) 
> EIP is at ipv6_skip_exthdr+0x116/0x148
> eax: fffffff2   ebx: 00000000   ecx: 0000005c   edx: dabf3a4c
> esi: 00000080   edi: 00000082   ebp: cb9a63e0   esp: dabf3a40
> ds: 007b   es: 007b   ss: 0068
> Process named (pid: 11120, threadinfo=dabf2000 task=e706a5a0)
> Stack: 00000002 00296b00 dabf3a77 c03a4e40 00000028 cb9a63e0 f6fe6e00 dabf3b1c 
>        c01d7189 00000014 00000000 f6fe6210 ce3263c0 003263c0 c03a4e40 c0296876 
>        c03a4e40 00000000 c0296b00 80000000 c042f010 ce3263c0 c03aadec c042f020 
> Call Trace:
>  [<c01d7189>] selinux_parse_skb_ipv6+0x89/0x150

Known bug in SELinux.  The upstream fix for 2.6.12 was:
http://marc.theaimsgroup.com/?l=bk-commits-head&m=111444145104674&w=2
A more minimal fix that might be more appropriate for 2.6.11.x was:
http://marc.theaimsgroup.com/?l=linux-net&m=111417845723966&w=2

-- 
Stephen Smalley
National Security Agency

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/