weixin_39646695 2020-11-30 05:31
浏览 0

Panic in compat_ws -- use after free?

Just saw this error in CI -- (Linux) -- first time it's cropped up in a while.

51/64 Test #51: compat_ws ........................***Exception: Other 0.00 sec panic: pthread_mutex_lock: Invalid argument This message is indicative of a BUG. Report this at http://github.com/nanomsg/nanomsg /root/project/build/libnng.so.1(+0x16358) [0x7f9716cb5358] /root/project/build/libnng.so.1(+0x22a1a) [0x7f9716cc1a1a] /root/project/build/libnng.so.1(+0x229d5) [0x7f9716cc19d5] /root/project/build/libnng.so.1(+0x1be75) [0x7f9716cbae75] /root/project/build/libnng.so.1(+0x3412e) [0x7f9716cd312e] /root/project/build/libnng.so.1(+0x1b7e5) [0x7f9716cba7e5] /root/project/build/libnng.so.1(+0x1c192) [0x7f9716cbb192] /root/project/build/libnng.so.1(+0x22e6d) [0x7f9716cc1e6d] /lib/x86_64-linux-gnu/libpthread.so.0(+0x76ba) [0x7f97164b76ba] /lib/x86_64-linux-gnu/libc.so.6(clone+0x6d) [0x7f97169dc41d]

该提问来源于开源项目：nanomsg/nng

  • 写回答

7条回答 默认 最新

  • weixin_39646695 2020-11-30 05:31
    关注

    My hope is that this was caused by #533 -- or addressed by it.

    I suspect that there may be other cases where we used nni_aio_close without doing a full nni_aio_stop. Time will tell.

    评论

报告相同问题？

  • CTF-PWN-kernel-堆（UAF heap_overflow freelist劫持 offbynull arbitary_heap_free unlink page_level ）
    2024-08-26 23:58
    看星猩的柴狗的博客 文章目录参考Use After Free绑核cred_jar 可合并expcred_jar 不可合并利用 tty_struct 劫持程序控制流提权expHeap Overflow排布溢出修改 credexp堆溢出 + 堆喷射覆写 seq_operations 控制内核执行流expArbitrary ...
  • Rust crates最近下载量前5000（截至2025/12/13 10:45）
    2025-11-28 21:05
    shada的博客 json auto_impl ipconfig psl-types roxmltree actix-server validator_derive arrow-csv gix-features no-std-compat deflate64 vte lru-cache wayland-sys actix-codec serde_cbor gix-hash actix-router chrono-...
  • epoll源码，自己学习用
    2020-08-20 22:22
    赵健zj的博客 In * order to communicate this nesting to lockdep, when walking a tree * of epoll file descriptors, we use the current recursion depth as * the lockdep subkey. * It is possible to drop the "ep->mtx" ...
  • KVM 虚拟化原理探究--启动过程及各部分虚拟化原理
    2018-01-05 16:31
    sdulibh的博客 对于x86架构来说，通过IN/OUT指令访问。PC架构一共有65536个8bit的I/O端口，组成64KI/O地址空间，编号从0~0xFFFF。连续两个8bit的端口可以组成一个16bit的端口，连续4个组成一个32bit的端口。I/O地址空间和CPU的物理...
  • Linux_at91——tty_io.c
    2018-03-09 10:14
    阿卡基-马的博客 naming policy and if udev is in use may not reflect user space  *  * Locking: none  */ char *tty_name(struct tty_struct *tty, char *buf) { if (!tty) /* Hmm. NULL pointer. That's fun. */ ...
  • JDK源码分析 NIO实现
    2020-03-03 01:32
    深度Java的博客 Returns 0 in case of success, -1 in case of error ( the "errno" variable will contain the specific error code ) The "op" parameter is one of the EPOLL_CTL_* constants defined above. The "fd" ...
  • Kernel Pwn 入门 (2)
    2022-04-30 22:57
    C0Lin的博客 } Kernel Use After Free & SMAP/SMEP bypass 与用户态类似，内核中也可以利用UAF漏洞，但内存分配的方式完全不同。本漏洞利用使用另一道经典Kernel Pwn入门例题——CISCN-2017 babydriver。同时本题还需要进行SMAP...
  • Linux 串口驱动相关
    2018-10-31 19:39
    vv_cool的博客 serial_in ) ( struct uart_port * , int ) ; void ( * serial_out ) ( struct uart_port * , int , int ) ; void ( * set_termios ) ( struct uart_port * , struct ktermios *...
  • Buildroot笔记
    2019-11-20 11:31
    hceng_blog的博客 整个Buildroot是由Makefile(*.mk)脚本和Kconfig(Config.in)配置文件构成的，因此可以像配置Linux内核一样执行 make menuconfig 进行配置，编译出一个完整的、可以直接烧写到机器上运行的Linux系统文件(包含...
  • uboot2011.09源代码ReadMe译文
    2015-04-17 09:02
    吴英强的博客 U-Boot v2009.11.1 - Release 1 in version November 2009 stable tree U-Boot v2010.09-rc1 - Release candiate 1 for September 2010 release 目录层次 ： ==================== ...
  • linux新手入门及安装全攻略(转载)
    2005-10-07 07:59
    star33375249的博客  Q：提示“kernel panic: VFS: Unable to mount root fs on  XX:YY”是什么意思?  首先，请根据 device code 清单检查 device XX:YY ；它是正确的 root device  吗?如果不是，那你可能沒有做過 rdev -R ，...
  • 没有解决我的问题, 去提问