[lkml]   [2005]   [Nov]   [28]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH & RFC] kdump and stack overflows
    On Mon, 2005-11-28 at 06:39 -0700, Eric W. Biederman wrote: 
    > Fernando Luis Vazquez Cao <> writes:
    > > Hi,
    > >
    > > I have observed that kdump's reboot path to the second kernel is not
    > > stack overflow safe.
    > >
    > > On the event of a stack overflow critical data that usually resides at
    > > the bottom of the stack is likely to be stomped and, consequently, its
    > > use should be avoided.
    > >
    > > In particular, in the i386 and IA64 architectures the macro
    > > smp_processor_id ultimately makes use of the "cpu" member of struct
    > > thread_info which resides at the bottom of the stack (see code snips
    > > below). x86_64, on the other hand, is not affected by this problem
    > > because it benefits from the PDA infrastructure.
    > I agree this is something that we should handle if we can.
    > >
    > > To circumvent this problem I suggest implementing
    > > "safe_smp_processor_id()" (it already exists on x86_64) for i386 and
    > > IA64 and use it as a replacement to smp_processor_id in the reboot path
    > > to the dump capture kernel. A possible implementation for i386 is
    > > attached below.
    > >
    > > I would appreciante comments on this.
    > The patch looks like a good one to express the idea, but it is a
    > bad one to push upstream.
    > safe_smp_processor_id has a printk in it.
    Sorry for the vestige of debugging code.

    > mm/fault.c has related code that really should go into a separate
    > patch.
    > For crash_nmi_callback I don't feel very comfortable about
    > dropping the cpu parameter. I suspect you want to move
    > the call safe_smp_process_id to do_nmi (which is current
    > calling smp_processor_id). Basically the whole nmi path needs a stack
    > overflow audit.
    The reason behind dropping the cpu parameter in crash_nmi_callback was
    to avoid the use of the much slower safe_smp_processor_id in do_nmi,
    what would have an impact on all possible nmi handlers. This is ok with
    crash_nmi_callback since it obviously isn't performance critical. But,
    reconsidering the problem, one could argue that an nmi handler will
    hardly ever be a fast path. I think I will move safe_smp_processor_id to
    do_nmi as you suggested (sorry for thinking aloud).

    Regarding the stack overflow audit of the nmi path, we have the problem
    that both nmi_enter and nmi_exit in do_nmi (see code below) make heavy
    use of "current" indirectly (specially through the kernel preemption

    fastcall void do_nmi(struct pt_regs * regs, long error_code)
    int cpu;


    cpu = smp_processor_id();

    if (!cpu_online(cpu)) {


    if (!rcu_dereference(nmi_callback)(regs, cpu))


    > I believe we have a separate interrupt stack that
    > should help but..
    Yes, when using 4K stacks we have a separate interrupt stack that should
    help, but I am afraid that crash dumping is about being paranoid.

    I will split the previous patch as indicated below appropriately and
    resend the parts in subsequent emails.

    List of patches:

    * safe_smp_processor_id: stack overflow safe implementation of
    * crash: replace smp_processor_id with safe_smp_processor_id in
    * do_nmi: replace smp_processor_id with safe_smp_processor_id
    NOTE: this patch is still imcomplete. Once I audit the whole nmi path
    I will prepare a new patch complementing this.
    * fault: take stack overflows into account in do_page_fault



    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2005-11-28 19:07    [W:0.028 / U:30.156 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site