[Bug 87891] New: kernel BUG at mm/slab.c:2625!
On Tue, 11 Nov 2014, Andrew Morton wrote: > Well, attempting to fix it up and continue is nice, but we can live > with the BUG. > > Not knowing which bit was set is bad. Could we change BUG_ON to diplay the value? This keeps on coming up. If you want to add this to the slab allocators then please add to mm/slab_common.c and refer to it from the other allocators.
[Bug 87891] New: kernel BUG at mm/slab.c:2625!
On Tue, 11 Nov 2014, Andrew Morton wrote: > There's no point in doing > > #define GFP_SLAB_BUG_MASK (__GFP_DMA32|__GFP_HIGHMEM|~__GFP_BITS_MASK) > > because __GFP_DMA32|__GFP_HIGHMEM are already part of ~__GFP_BITS_MASK. ?? ~__GFP_BITS_MASK means bits 25 to 31 are set. __GFP_DMA32 is bit 2 and __GFP_HIGHMEM is bit 1.
WARNING: at mm/slub.c:3357, kernel BUG at mm/slub.c:3413
On Wed, 23 Nov 2011, Markus Trippelsdorf wrote: > > FIX idr_layer_cache: Marking all objects used > > Yesterday I couldn't reproduce the issue at all. But today I've hit > exactly the same spot again. (CCing the drm list) Well this is looks like write after free. > = > BUG idr_layer_cache: Poison overwritten > - > Object 8802156487c0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b > > Object 8802156487d0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b > > Object 8802156487e0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b > > Object 8802156487f0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b > > Object 880215648800: 00 00 00 00 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b > > Object 880215648810: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b > And its an integer sized write of 0. If you look at the struct definition and lookup the offset you should be able to locate the field that was modified.
Re: WARNING: at mm/slub.c:3357, kernel BUG at mm/slub.c:3413
On Wed, 23 Nov 2011, Markus Trippelsdorf wrote: FIX idr_layer_cache: Marking all objects used Yesterday I couldn't reproduce the issue at all. But today I've hit exactly the same spot again. (CCing the drm list) Well this is looks like write after free. = BUG idr_layer_cache: Poison overwritten - Object 8802156487c0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b Object 8802156487d0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b Object 8802156487e0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b Object 8802156487f0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b Object 880215648800: 00 00 00 00 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b Object 880215648810: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b And its an integer sized write of 0. If you look at the struct definition and lookup the offset you should be able to locate the field that was modified. ___ dri-devel mailing list dri-devel@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/dri-devel
