Salut all,
Kernel does a NULL-pointer reference in IPX routingcode.
How to do it:
1. built a kernel 2.1.132 till 2.2.0pre6 with CONFIG_IPX_INTERN,
(I did not check earlier 2.1-kernels - sorry)
2. make a pppd or ipppd connection with both ip and ipx (I did not check if a
connection with only ipx is enougth)
3. be sure that ipxd is running
4. take down pppd or ipppd link.
- -> the ipxd will cause a NULL-pointer referenzation at the memcpy line in the
net/ipx/af_ipx.c.
After I applyed my searching patch, I never got the "ig 1" message, but each
link-down a "ig 2"-message.
As I do not understand the semantics of the internal-Net, I am not able to fix
this kernelbug. But I think, that it is a bad thing, because it damages a part
of the kernel, i.e. the ipx-module will no longer be unloadable after such a
NULL-reference.
net/ipx/af_ipx.c:
- ----in function ipx_recvmsg---------
#ifdef CONFIG_IPX_INTERN
- - memcpy(uaddr.sipx_node, sk->protinfo.af_ipx.intrfc->if_node,
+ if(sk->protinfo.af_ipx.intrfc)
+ {
+ printk(KERN_WARNING "ig 1\n");
+ memcpy(uaddr.sipx_node, sk->protinfo.af_ipx.intrfc->if_node,
IPX_NODE_LEN);
+ }
+ else
+ printk(KERN_WARNING "ig 2\n");
#endif /* CONFIG_IPX_INTERN */
- --------------------------------------------
Thanks!!!
hartwig
1024/7A5EADED Hartwig Felger <hgfelger@vossnet.de>
pgp-Key fingerprint = 2F 3B 34 10 00 B7 FE 10 CE 84 E2 56 1C B0 3E 07
768/CA2159D9 Hartwig Felger <hgfelger@trick.informatik.uni-stuttgart.de>
pgp-Key fingerprint = 18 49 5E 6E 4E 47 3D F5 28 3E 11 C9 05 26 F3 46
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: latin1
Comment: Requires PGP version 2.6 or later.
iQCVAwUBNp0Zdug8bRR6Xq3tAQF8hwP9GedS0LYQmn1GGsFsE+kfcnt/K6taiHSS
yy9oAFCvP9elui0SilSE61jKdP1eQSDZdLRRP26fZgdgnWTpf9LGr7rO621Xdi/F
AQ4ve7BgIkijayLFy6+A99T2ic2pdSftDpoRmvB9uge8k5EFBFFdY9k1HCCZM+gs
9C/qwrrAh10=
=bsxt
-----END PGP SIGNATURE-----
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/