On Fri, May 22, 2015 at 09:32:28AM +0200, Johannes Berg wrote: > > The CCM and GCM part seems to work, but GMAC causes a kernel crash:
Awesome :) > [ 26.143579] BUG: unable to handle kernel NULL pointer dereference at > (null) > [ 26.144406] IP: [<ffffffff811d9e7d>] scatterwalk_map_and_copy+0x3d/0xd0 > [ 26.145071] PGD da3a067 PUD d9ee067 PMD 0 > [ 26.145514] Oops: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC > [ 26.146146] CPU: 1 PID: 661 Comm: hostapd Not tainted 4.0.0+ #860 > [ 26.146746] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS > 1.7.5-20140531_083030-gandalf 04/01/2014 > [ 26.148333] task: ffff88000d9a4a20 ti: ffff880000070000 task.ti: > ffff880000070000 > [ 26.149625] RIP: 0010:[<ffffffff811d9e7d>] [<ffffffff811d9e7d>] > scatterwalk_map_and_copy+0x3d/0xd0 > [ 26.151223] RSP: 0018:ffff8800000733b8 EFLAGS: 00010246 > [ 26.152156] RAX: 0000000000000000 RBX: 0000000000000010 RCX: > 000077ff80000000 > [ 26.153396] RDX: 0000000080000000 RSI: 0000000000000000 RDI: > ffff8800000733c8 > [ 26.153481] RBP: ffff880000073428 R08: 0000000000000001 R09: > 0000000000000010 > [ 26.153481] R10: 0000000000000010 R11: 0000000000000012 R12: > 0000000000000001 > [ 26.153481] R13: ffff8800000735f8 R14: 0000000000000000 R15: > 0000000000000030 > [ 26.153481] FS: 00007f20eee60700(0000) GS:ffff88000f600000(0000) > knlGS:0000000000000000 > [ 26.153481] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 > [ 26.153481] CR2: 0000000000000000 CR3: 000000000da2a000 CR4: > 00000000000007a0 > [ 26.153481] Stack: > [ 26.153481] 0000000000000000 0000000000000030 ffff8800000733d8 > ffffffff811e05c6 > [ 26.153481] ffff8800000733f8 ffffffff811df815 ffff8800000735f8 > ffff880000073598 > [ 26.153481] ffff880000073408 ffffffff811dfc86 ffff880000073438 > ffff8800000735f8 > [ 26.153481] Call Trace: > [ 26.153481] [<ffffffff811e05c6>] ? shash_async_final+0x16/0x20 > [ 26.153481] [<ffffffff811df815>] ? crypto_ahash_op+0x25/0x60 > [ 26.153481] [<ffffffff811dfc86>] ? crypto_ahash_final+0x16/0x20 > [ 26.153481] [<ffffffff811e3608>] gcm_enc_copy_hash+0x28/0x30 > [ 26.153481] [<ffffffff811e36fc>] crypto_gcm_encrypt+0xec/0x100 > [ 26.153481] [<ffffffff811e3610>] ? gcm_enc_copy_hash+0x30/0x30 > [ 26.153481] [<ffffffff811da875>] old_crypt+0xc5/0xe0 > [ 26.153481] [<ffffffff811da8cd>] old_encrypt+0x1d/0x20 > [ 26.153481] [<ffffffff814b688b>] ieee80211_aes_gmac+0x21b/0x230 > [ 26.153481] [<ffffffff811e3710>] ? crypto_gcm_encrypt+0x100/0x100 > [ 26.153481] [<ffffffff811e2f10>] ? __gcm_hash_final_done+0x60/0x60 > [ 26.153481] [<ffffffff814b66a4>] ? ieee80211_aes_gmac+0x34/0x230 > [ 26.153481] [<ffffffff81498621>] > ieee80211_crypto_aes_gmac_encrypt+0x191/0x1a0 > [ 26.153481] [<ffffffff8153b794>] ieee80211_tx_h_encrypt+0x67/0x77 > [ 26.153481] [<ffffffff814cd496>] invoke_tx_handlers+0xe6/0x1b0 Did this have a code section at the end? Without it it's difficult to pin-point the crash because your compiler produces different output than mine. Thanks, -- Email: Herbert Xu <herb...@gondor.apana.org.au> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
