Re: tty-related oops in latest kernel(s)?

[Tero Roponen <teanropo@jyu.fi>]

On Tue, 29 May 2007, Pekka Enberg wrote:

> Hi Tero,
> 
> On 5/29/07, Tero Roponen <teanropo@jyu.fi> wrote:
> > FYI, I just tested 2.6.21.3. I couldn't reproduce the problem with
> > that kernel.
> 

[snip] 

> > Warning: dev (tty4) tty->count(3) != #fd's(2) in release_dev
> > release_dev: driver.table[3] not tty for (tty4)
> 
> Presumably someone tries to close the file again which is why we get a
> new complaint that reference counting has gone bad.
> 
> Unfortunately, I have no idea why drivers->tty does not match. It
> could be a race with release_tty() or real use-after-free but I am
> unable to find anything obvious in 2.6.21 -> 2.6.22-rc3 that would
> break it. Doing the git bisect dance here would really help...

Hmmm, I just found something interesting. In 2.6.21.3 the /sbin/init
gets corrupted when I watch the video!

$ cp /sbin/init init.before
$ mplayer kiwi.flv
$ cp /sbin/init init.after

The sha1sums are here:

52c8d643057619cbe137b8e69d4709ce3bdd832d  init.after
8efc7864a5b535a9e336fa82e9d7f112f3d956c1  init.before

It seems that something corrupts memory somewhere...

I attached those files in case someone can figure out
what is happening.
_
Tero Roponen

Attachment: init.before
Description: Binary data

Attachment: init.after
Description: Binary data