[grsec] problem in "gr_handle_rename" (new after upgrade to 2.4.31/grsec 2.1.6)

Johannes Resch jr at xor.at
Wed Jun 29 04:53:30 EDT 2005


hi,

i just got the following on a box running 2.4.31/grsec 2.1.6 (debian sarge),
the messages appeared just as i tried to stop a mail scanner app.
i was unable to kill the procs however, and had to do a reboot.

the system has been upgraded from 2.4.28/2.1.0 two days ago,
it's been running rock-solid before.


Jun 29 09:47:06 merkur kernel: divide error: 0000
Jun 29 09:47:06 merkur kernel: CPU:    0
Jun 29 09:47:06 merkur kernel: EIP:    0010:[lookup_inodev_entry+61/160]  
 Not tainted
Jun 29 09:47:06 merkur kernel: EFLAGS: 00010246
Jun 29 09:47:06 merkur kernel: eax: 35f1bc17   ebx: 00000000   ecx:
00000000   edx: 00000000
Jun 29 09:47:06 merkur kernel: esi: 00000000   edi: 00055317   ebp:
00000000   esp: d3d85f08
Jun 29 09:47:06 merkur kernel: ds: 0018   es: 0018   ss: 0018
Jun 29 09:47:06 merkur kernel: Process avgatefwd (pid: 31892,
stackpage=d3d85000)
Jun 29 09:47:06 merkur kernel: Stack: 00000900 c46396c0 d208df40 00000000
00000000 c031f218 00055317 00000900
Jun 29 09:47:06 merkur kernel:        deb60c80 c46396c0 de706140 cb1e7000
c46396c0 d1e5c000 c018b9e6 deb60c80
Jun 29 09:47:06 merkur kernel:        deb60c80 d208df40 c46396c0 c158f340
00000000 d1e5c000 c46396c0 d208df40
Jun 29 09:47:06 merkur kernel: Call Trace:    [gr_handle_rename+104/240]
[sys_rename+470/592] [sys_stat64+31/128] [system_call+51/64]
Jun 29 09:47:06 merkur kernel:
Jun 29 09:47:06 merkur kernel: Code: f7 f3 8b 04 96 85 c0 74 44 39 78 04
74 43 90 8d 74 26 00 b8
Jun 29 09:47:06 merkur kernel:  divide error: 0000
Jun 29 09:47:06 merkur kernel: CPU:    0
Jun 29 09:47:06 merkur kernel: EIP:    0010:[lookup_inodev_entry+61/160]  
 Not tainted
Jun 29 09:47:06 merkur kernel: EFLAGS: 00010246
Jun 29 09:47:06 merkur kernel: eax: 83cd3ab3   ebx: 00000000   ecx:
00000000   edx: 00000000
Jun 29 09:47:06 merkur kernel: esi: 00000000   edi: 000551b3   ebp:
00000000   esp: c7e7ff08
Jun 29 09:47:06 merkur kernel: ds: 0018   es: 0018   ss: 0018
Jun 29 09:47:06 merkur kernel: Process avgatefwd (pid: 8582,
stackpage=c7e7f000)
Jun 29 09:47:06 merkur kernel: Stack: 00000900 c4639740 c4f837c0 00000000
00000000 c031f218 000551b3 00000900
Jun 29 09:47:06 merkur kernel:        de7152c0 c4639740 de706240 d33de000
c4639740 d3fe6000 c018b9e6 de7152c0
Jun 29 09:47:06 merkur kernel:        de7152c0 c4f837c0 c4639740 c158f340
00000000 d3fe6000 c4639740 c4f837c0
Jun 29 09:47:06 merkur kernel: Call Trace:    [gr_handle_rename+104/240]
[sys_rename+470/592] [sys_stat64+31/128] [system_call+51/64]
Jun 29 09:47:06 merkur kernel:
Jun 29 09:47:06 merkur kernel: Code: f7 f3 8b 04 96 85 c0 74 44 39 78 04
74 43 90 8d 74 26 00 b8

best regards,
-jr



More information about the grsecurity mailing list