Re: Crashes with Grsecurity kernel

From: Christian Rößner <c_at_roessner-network-solutions.com>
Date: Sun, 11 Jan 2015 19:11:40 +0100

> Am 11.01.2015 um 19:07 schrieb Christian Rößner <c_at_roessner-network-solutions.com>:
>
> I have created a video that demonstrates the problem.
>
> https://www.roessner-network-solutions.com/opendkim.html
>
> It Gentoo
> gentoo-sources 3.17.7
> opendkim-2.10.0 (distribution version without reputation flags)
>
> And it crashes :-(

[New Thread 0x7f424e24d700 (LWP 32598)]
[Thread 0x7f424e24d700 (LWP 32598) exited]
[Thread 0x7f424da4c700 (LWP 32551) exited]
[New Thread 0x7f424da4c700 (LWP 32609)]
[Thread 0x7f424ca4a700 (LWP 32588) exited]
[New Thread 0x7f424ca4a700 (LWP 32628)]
[New Thread 0x7f424e24d700 (LWP 32648)]
[Thread 0x7f424da4c700 (LWP 32609) exited]
[New Thread 0x7f424da4c700 (LWP 32663)]
[Thread 0x7f424ca4a700 (LWP 32628) exited]
[New Thread 0x7f424ca4a700 (LWP 32692)]
[Thread 0x7f424e24d700 (LWP 32648) exited]
[New Thread 0x7f424e24d700 (LWP 32704)]
[New Thread 0x7f424ea4e700 (LWP 32719)]
[Thread 0x7f424da4c700 (LWP 32663) exited]

Program received signal SIGABRT, Aborted.
[Switching to Thread 0x7f424ea4e700 (LWP 32719)]
0x00007f4250e3a825 in raise () from /lib64/libc.so.6
(gdb) bt
#0 0x00007f4250e3a825 in raise () from /lib64/libc.so.6
#1 0x00007f4250e3bca8 in abort () from /lib64/libc.so.6
#2 0x00007f4250e7ae22 in ?? () from /lib64/libc.so.6
#3 0x00007f4250e809e6 in ?? () from /lib64/libc.so.6
#4 0x00007f4253227f34 in mi_engine (ctx=ctx_at_entry=0x7f4254340300) at engine.c:409
#5 0x00007f4253229fe8 in mi_handle_session (ctx=0x7f4254340300) at handler.c:45
#6 0x00007f4253228b79 in mi_thread_handle_wrapper (arg=<optimized out>) at listener.c:579
#7 0x00007f42511b81da in start_thread () from /lib64/libpthread.so.0
#8 0x00007f4250eefe7d in clone () from /lib64/libc.so.6

Christian

>
> Christian
>
>> Am 11.01.2015 um 18:13 schrieb Christian Rößner <c_at_roessner-network-solutions.com>:
>>
>> I kust died in fron of my eyes:
>>
>> Jan 11 18:08:43 mx postfix-relay/smtpd[16073]: warning: milter inet:[::1]:8892: can't read SMFIC_RCPT reply packet header: Connection reset by peer
>> Jan 11 18:08:43 mx postfix-relay/smtpd[16074]: warning: milter inet:[::1]:8892: can't read SMFIC_RCPT reply packet header: Success
>>
>> And the process is gone.
>>
>> :-(
>>
>> And on my other server, where I have the standard kernel, the opendkim.verify process has died an hour ago. I really don’t understand all this.
>>
>> Christian
>>
>>> Am 11.01.2015 um 17:59 schrieb Christian Rößner <c_at_roessner-network-solutions.com>:
>>>
>>>
>>>> Am 11.01.2015 um 17:17 schrieb A. Schulze <sca_at_andreasschulze.de>:
>>>>
>>>>
>>>> Christian Rößner:
>>>>
>>>>> ... And it wouldn’t do this, if there was no good reason for it.
>>>> Ack.
>>>>
>>>> But all _I_ can say is opendkim (still 2.9.2) sign and verify millions of messages without any coredump.
>>>> That does not hardly look like a stack frame bug.
>>>
>>> Good point. But I really have no idea, why opendkim runs with non grsec and seg faults _sometimes_ with grsec.
>>>
>>> I just did
>>>
>>> paxctl -cmps /usr/sbin/opendkim
>>>
>>> This leads to:
>>>
>>> paxctl -v /usr/sbin/opendkim
>>> PaX control v0.7
>>> Copyright 2004,2005,2006,2007,2009,2010,2011,2012 PaX Team <pageexec_at_freemail.hu>
>>>
>>> - PaX flags: -p-s-m-x-e-- [/usr/sbin/opendkim]
>>> PAGEEXEC is disabled
>>> SEGMEXEC is disabled
>>> MPROTECT is disabled
>>> RANDEXEC is disabled
>>> EMUTRAMP is disabled
>>>
>>> And I sent about 600 mails in a loop without problems. I still wait and see, if opendkim seg faults again. Maybe it is PaX that sends a SIGABRT.
>>>
>>> Still investigating.
>>>
>>> Thanks
>>>
>>> Christian
>>> --
>>> Bachelor of Science Informatik
>>> Erlenwiese 14, 36304 Alsfeld
>>> T: +49 6631 78823400, F: +49 6631 78823409, M: +49 171 9905345
>>> USt-IdNr.: DE225643613, http://www.roessner-network-solutions.com
>>>
>>> --
>>> Bachelor of Science Informatik
>>> Erlenwiese 14, 36304 Alsfeld
>>> T: +49 6631 78823400, F: +49 6631 78823409, M: +49 171 9905345
>>> USt-IdNr.: DE225643613, http://www.roessner-network-solutions.com
>>>
>>
>> --
>> Bachelor of Science Informatik
>> Erlenwiese 14, 36304 Alsfeld
>> T: +49 6631 78823400, F: +49 6631 78823409, M: +49 171 9905345
>> USt-IdNr.: DE225643613, http://www.roessner-network-solutions.com
>>
>>
>>
>
> --
> Bachelor of Science Informatik
> Erlenwiese 14, 36304 Alsfeld
> T: +49 6631 78823400, F: +49 6631 78823409, M: +49 171 9905345
> USt-IdNr.: DE225643613, http://www.roessner-network-solutions.com
>

--
Bachelor of Science Informatik
Erlenwiese 14, 36304 Alsfeld
T: +49 6631 78823400, F: +49 6631 78823409, M: +49 171 9905345
USt-IdNr.: DE225643613, http://www.roessner-network-solutions.com



Received on Sun Jan 11 2015 - 18:11:53 PST

This archive was generated by hypermail 2.3.0 : Sun Jan 11 2015 - 18:18:00 PST