grsecurity forums

Hi

When a client wifi to download data at speeds above 5 Mbps, often appears kernel panic.
Linux 4.8.10 & grsecurity-3.1-4.8.10-201611210813.patch
Also earlier kernels from version 4.8.6 caused a similar error.


On linux 4.7.x never seen a similar mistake.

Code: Select all

gcc --version
gcc (Gentoo Hardened 4.9.3 p1.3, pie-0.6.3) 4.9.3

Code: Select all

dev-libs/libressl-2.5.0 abi_x86_32 abi_x86_64 asm static-libs
net-wireless/hostapd-2.6 crda ipv6 netlink ssl wps

Console output:



Hostapd.conf:

Code: Select all

cat /etc/hostapd/hostapd.conf
interface=wlan0_ap
bridge=br0
driver=nl80211
hw_mode=g
ieee80211n=1
wmm_enabled=1
channel=2
country_code=PL
ieee80211d=1
ssid=Andek
auth_algs=1
wpa=3
wpa_passphrase={PASHRASE}
wpa_key_mgmt=WPA-PSK
wpa_pairwise=TKIP
rsn_pairwise=CCMP
macaddr_acl=0
ht_capab=[HT20][SHORT-GI-20]
eap_reauth_period=360000000
ignore_broadcast_ssid=0
logger_syslog=-1
ctrl_interface=/run/hostapd
ctrl_interface_group=wireshark


Cheers

can you send me your kernel .config and net/mac80211/aes_ccm.o please?

Of course, for an hour, just building a kernel, which wanted to turn kernel crash dumps to the future to have a log of such a kernel panic, and not just photograph the monitor.

I act according to this HOWTO:
https://wiki.gentoo.org/wiki/Kernel_Crash_Dumps
but I encountered a small problem:

Symbol: PROC_VMCORE [=n]
Type : boolean
Prompt: /proc/vmcore support
Location:
-> File systems
-> Pseudo filesystems
-> /proc file system support (PROC_FS [=y])
Defined at fs/proc/Kconfig:39
Depends on: PROC_FS [=y] && CRASH_DUMP [=y] && !GRKERNSEC [=y]

don't worry about it, i figured it out in the meantime. it's not RAP as i thought first but spender's magic stuff that caught an upstream bug.

can you send me your kernel .config and net/mac80211/aes_ccm.o please?

https://drive.google.com/drive/folders/ ... UNhaWdTanc

Filenames:

Code: Select all

linux-4.8.10-gr1-debug-x86.tar.xz
mac80211.tar.xz
SHA512SUM

PS:
If I load module ath9_htc without any options, kernel panic occurs at a fairly rapid transfer.
If the load module will add an option nohwcrypt = 1, then the kernel panic occurs at the moment of connection.

Cheers

Thanks, this will be fixed in the next patches.

-Brad