Re: SLUB Corruption from witin drivers/usb/core/devio.c

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 05/14/2012 06:19 PM, Alan Stern wrote:
On Mon, 14 May 2012, Oncaphillis wrote:

   length m/n tells you the actual_length/transfer_buffer_length
The last pair while accessing the tranfer_buffer seems to be 0/512

<snip>
   === proc_do_submiturb uurb->type==1:USBDEVFS_URB_TYPE_INTERRUPT alloc
tb:0xffff880077cfadf0 (512)
   === async_completed status==0 length:2/512 e=0
tb:0xffff880077cfadf0[00][41] last tb:0xffff880079612690[6b][6b]
   === free_async free tb:0xffff880077cfadf0
   === proc_do_submiturb uurb->type==1:USBDEVFS_URB_TYPE_INTERRUPT alloc
tb:0xffff880077cfadf0 (512)
   === async_completed status==-2 length:0/512 e=0
Status = -2 means this URB was unlinked.  What does "e=0" mean?
 Sorry - missed this line "e" is the urb->error_count
tb:0xffff880077cfadf0[6b][6b] last tb:0xffff880077cfadf0[6b][6b]
   === free_async free tb:0xffff880077cfadf0
   === proc_do_submiturb uurb->type==3:USBDEVFS_URB_TYPE_BULK alloc
tb:0xffff880079612690 (2)
   === async_completed status==0 length:2/2 e=0
tb:0xffff880079612690[9d][8d] last tb:0xffff880077cfadf0[9d][8d]
   === free_async free tb:0xffff880079612690
   =============================================================================
   BUG kmalloc-512 (Not tainted): Poison overwritten
   -----------------------------------------------------------------------------
   INFO: 0xffff880077cfadf0-0xffff880077cfadf1. First byte 0x9d instead
of 0x6b
</snip>
Which host controller driver is this device using?  And what type of
device is it?

 Now I also saw this bug on this hardware:

<snip>
00:1d.7 USB Controller: Intel Corporation 82801G (ICH7 Family) USB2 EHCI Controller (rev 01) (prog-if 20 [EHCI])
        Subsystem: NEC Corporation Device 834f
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR+ FastB2B- DisINTx- Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
        Latency: 0
        Interrupt: pin A routed to IRQ 23
        Region 0: Memory at d8500000 (32-bit, non-prefetchable) [size=1K]
        Capabilities: [50] Power Management version 2
Flags: PMEClk- DSI- D1- D2- AuxCurrent=375mA PME(D0+,D1-,D2-,D3hot+,D3cold+)
                Status: D0 NoSoftRst- PME-Enable- DSel=0 DScale=0 PME-
        Capabilities: [58] Debug port: BAR=1 offset=00a0
        Kernel driver in use: ehci_hcd
</snip>

I also have a machine with a VIA USB Controler which I will test this evening

Thanks

Alan Stern

--
To unsubscribe from this list: send the line "unsubscribe linux-usb" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

--
To unsubscribe from this list: send the line "unsubscribe linux-usb" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Media]     [Linux Input]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]     [Old Linux USB Devel Archive]

  Powered by Linux