https://tracker.ceph.com/https://tracker.ceph.com/favicon.ico2014-08-04T06:48:57ZCeph Linux kernel client - Bug #8979: GPF kernel panics - auth?https://tracker.ceph.com/issues/8979?journal_id=388992014-08-04T06:48:57ZSage Weilsage@newdream.net
<ul></ul><pre>
Hi,
The auth caps were as follows:
caps: [mon] allow r
caps: [osd] allow rwx pool=hosting_windows_sharedweb, allow rwx
pool=infra_systems, allow rwx pool=hosting_linux_sharedweb
I changed them (just adding a pool to the list) to:
caps: [mon] allow r
caps: [osd] allow rwx pool=hosting_windows_sharedweb, allow rwx
pool=infra_systems, allow rwx pool=hosting_linux_sharedweb, allow rwx pool=test
</pre>
<p>I suspect a simple buffer overflow on the auth ticket size ...</p> Linux kernel client - Bug #8979: GPF kernel panics - auth?https://tracker.ceph.com/issues/8979?journal_id=389002014-08-04T06:57:04ZSage Weilsage@newdream.net
<ul></ul><p>yeah:</p>
<p>#define TEMP_TICKET_BUF_LEN 256</p> Linux kernel client - Bug #8979: GPF kernel panics - auth?https://tracker.ceph.com/issues/8979?journal_id=389012014-08-04T07:07:08ZSage Weilsage@newdream.net
<ul></ul><p>pushed wip-8979 which removes the fixed buffer size. but, we still need to make things not crash when the auth reply processing fails. that could still happen if we get a huge ticket (>4k) and kmalloc fails on a large page size. or the auth reply from the mon is simply not understood by the client.</p> Linux kernel client - Bug #8979: GPF kernel panics - auth?https://tracker.ceph.com/issues/8979?journal_id=410762014-09-13T21:25:47ZSage Weilsage@newdream.net
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Pending Backport</i></li></ul> Linux kernel client - Bug #8979: GPF kernel panics - auth?https://tracker.ceph.com/issues/8979?journal_id=414752014-09-22T04:08:11ZIlya Dryomov
<ul><li><strong>Status</strong> changed from <i>Pending Backport</i> to <i>Resolved</i></li></ul><p>Landed in 3.17-rc5. Opened <a class="issue tracker-1 status-6 priority-4 priority-default closed" title="Bug: libceph: msg kmalloc failure handling on the reply path (Rejected)" href="https://tracker.ceph.com/issues/9560">#9560</a> and <a class="issue tracker-1 status-6 priority-4 priority-default closed" title="Bug: libceph: do not crash if auth reply is not understood (Rejected)" href="https://tracker.ceph.com/issues/9561">#9561</a> for the issues mentioned above.</p> Linux kernel client - Bug #8979: GPF kernel panics - auth?https://tracker.ceph.com/issues/8979?journal_id=535422015-06-15T08:16:12ZNathan Cutlerncutler@suse.cz
<ul><li><strong>Regression</strong> set to <i>No</i></li></ul><p><a class="external" href="https://github.com/torvalds/linux/commit/73c3d4812b4c755efeca0140f606f83772a39ce4">https://github.com/torvalds/linux/commit/73c3d4812b4c755efeca0140f606f83772a39ce4</a></p>