[Bug 1586528] Re: Avahi-daemon withdraws address record

[Philipp Hahn]

I'm running Debian-Stretch 9.4 and I'm observing a similar problem that
after some time my servers disappears from the network; usually first
the IPv6 address, the usually some time later the IPv4 address, but not
always.

All computers are connected to my FritzBox 7420:
- for IPv4 I'm using the fixed address 192.168.xxx.33/24, which the FritzBox 
always assigns only to that host.
- for IPv6 I get a daily changing IPv6 address from my internet provider each 
night, which gets propagated by RA. 

The affected host is using systemd 232-25+deb9u2 and I have configured
systemd-networkd to do the network configuration:

/etc/systemd/network/40-dhcp.network
 DHCP=ipv4
 IPv6AcceptRA=yes

For now I have disabled DHCP for ipv4 and switched to a static
configuration, as it sometimes happens that the network is flacky and
does not receive an address during boot at all.

I once compiled my own version of systems with this patch included:
 

It is for .

While I had that custom version running I did *not* observe those issues, but 
then Debian shipped a security update and since than the problem is back.
This might not be the same issue as there have been different comments in this 
issue mentioning ifupdown,  NetworkManager, ..., but perhaps affected users 
should clarify their environment, e.g. IPv4 and/or IPv6, static addresses or 
changing addresses/prefixes, ...

** Bug watch added: github.com/systemd/systemd/issues #5625
   https://github.com/systemd/systemd/issues/5625

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1586528

Title:
  Avahi-daemon withdraws address record

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/avahi/+bug/1586528/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1325560] Re: kvm virtio netdevs lose network connectivity under "enough" load

[Philipp Hahn]

bug #1346917 only mentions the same issue after updating to the kernel
of that specific bug; this issue (network problem) is completely
different from that one (same page sharing on NUMA).

** This bug is no longer a duplicate of bug 1346917
   Using KSM on NUMA capable machines can cause KVM guest performance and 
stability issues

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1325560

Title:
  kvm virtio netdevs lose network connectivity under "enough" load

To manage notifications about this bug go to:
https://bugs.launchpad.net/libvirt/+bug/1325560/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1581420] Re: CVE-2016-3960 / XSA-173

[Philipp Hahn]

v2 did not yet include the patch for 32 bit, as I only later got the
confirmation of using but 24 is okay.

** Patch added: "XSA-173 v3"
   
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1581420/+attachment/4679100/+files/36_fix_xsa173.patch

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1581420

Title:
  CVE-2016-3960 / XSA-173

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1581420/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1583960] Re: CVE-2016-4480

[Philipp Hahn]

Correct me if I'm wrong, but
 is a *Xen* Bug, not a
*Linux-Kernel* Bug: "xen/arch/x86/mm/guest_walk.c" is in the Hypervisor
part of Xen.

I tried to back-port the bug to xen-4.1.6.1 from Precise but the patch
is not applicable directly, as xen-4.1 does not seem to support 1GiB
super pages; it was only introduced in xen-4.2:

$ git l1 -1 96b740e2
96b740e x86/mm: Handle 1GiB superpages in the pagetable walker.
$ git describe --contains 96b740e2
4.2.0-rc1~1863

I don't know what would happen if xen-4.1 would run on a CPU supporting 1GiB 
large pages.
Either 1GiB SP should be disabled are 96b740e2 needs to be back-ported as a 
pre-requisite for 46699c7393bd991234b5642763c5c24b6b39a6c4

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1583960

Title:
  CVE-2016-4480

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1583960/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1564853] [NEW] xendomains fails to suspend VMs not running

[Philipp Hahn]

Public bug reported:

`/etc/init.d/xendomains stop` fails on xen-4.1.6.1 as it tries to parse
the output of "xm list", which has a varying number of columns for
running and already shut down VMs:

For managed inactive domains `xm list` does not output a domain-ID and a
state.

| # xm list
| NameID   Mem VCPUs  State   
Time(s)
| Domain-0 0  3884 2 r- 71.6
| yyy  512 1 0.0
| xxx  7   512 1 -b  1.1

Also cpu is not output.

Rewrite parseln() to use IFS for splitting and use number of output columns to
parse the lines.

** Affects: xen (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: patch

** Patch added: "Fix `xm list` parsing"
   
https://bugs.launchpad.net/bugs/1564853/+attachment/4619341/+files/20_Bug40697_xendomains.patch

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to xen in Ubuntu.
https://bugs.launchpad.net/bugs/1564853

Title:
  xendomains fails to suspend VMs not running

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1564853/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1564853] [NEW] xendomains fails to suspend VMs not running

[Philipp Hahn]

Public bug reported:

`/etc/init.d/xendomains stop` fails on xen-4.1.6.1 as it tries to parse
the output of "xm list", which has a varying number of columns for
running and already shut down VMs:

For managed inactive domains `xm list` does not output a domain-ID and a
state.

| # xm list
| NameID   Mem VCPUs  State   
Time(s)
| Domain-0 0  3884 2 r- 71.6
| yyy  512 1 0.0
| xxx  7   512 1 -b  1.1

Also cpu is not output.

Rewrite parseln() to use IFS for splitting and use number of output columns to
parse the lines.

** Affects: xen (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: patch

** Patch added: "Fix `xm list` parsing"
   
https://bugs.launchpad.net/bugs/1564853/+attachment/4619341/+files/20_Bug40697_xendomains.patch

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1564853

Title:
  xendomains fails to suspend VMs not running

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1564853/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1515145] Re: xm migrate --live panics hypervisor

[Philipp Hahn]

Backport 3b0bcb8 x86/mm/p2m: Move p2m code in HVMOP_[gs]et_mem_access into p2m.c
needs f488040222f34df97deb2470f14cef7fb9599810 to fix the build on i386.

f488040 Fix 32-bit build after p2m series
3b0bcb8 x86/mm/p2m: Move p2m code in HVMOP_[gs]et_mem_access into p2m.c

** Patch added: "Backport 3b0bcb8  + f488040"
   
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1515145/+attachment/4619340/+files/xsa97-hap-4.1-prereq2.patch

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1515145

Title:
  xm migrate --live panics hypervisor

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1515145/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1515145] Re: xm migrate --live panics hypervisor

[Philipp Hahn]

Backport 3b0bcb8 x86/mm/p2m: Move p2m code in HVMOP_[gs]et_mem_access into p2m.c
needs f488040222f34df97deb2470f14cef7fb9599810 to fix the build on i386.

f488040 Fix 32-bit build after p2m series
3b0bcb8 x86/mm/p2m: Move p2m code in HVMOP_[gs]et_mem_access into p2m.c

** Patch added: "Backport 3b0bcb8  + f488040"
   
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1515145/+attachment/4619340/+files/xsa97-hap-4.1-prereq2.patch

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to xen in Ubuntu.
https://bugs.launchpad.net/bugs/1515145

Title:
  xm migrate --live panics hypervisor

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1515145/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1564797] [NEW] Changing media fails

[Philipp Hahn]

Public bug reported:

With xen-4.1.6.1 changing the CD-ROM media fails as xend mixes passing
arguments as "int" and "str".

Traceback (most recent call last):
  File "/usr/lib/python2.5/site-packages/xen/web/SrvBase.py", line 85, in 
perform
return op_method(op, req)
  File "/usr/lib/python2.5/site-packages/xen/xend/server/SrvDomain.py", line 
201, in op_device_configure
req)
  File "/usr/lib/python2.5/site-packages/xen/xend/server/SrvDomain.py", line 
171, in call
return FormFn(fn, args)(req.args)
  File "/usr/lib/python2.5/site-packages/xen/xend/Args.py", line 166, in 
__call__
return self.call_with_form_args(self.fn, fargs, xargs=xargs)
  File "/usr/lib/python2.5/site-packages/xen/xend/Args.py", line 138, in 
call_with_form_args
return fn(*params, **keys)
  File "/usr/lib/python2.5/site-packages/xen/xend/XendDomainInfo.py", line 
1099, in device_configure
dev_uuid = dev_control.reconfigureDevice(devid, dev_config)
  File "/usr/lib/python2.5/site-packages/xen/xend/server/blkif.py", line 128, 
in reconfigureDevice
(dev, mode) = self.readBackend(devid, 'dev', 'mode')
  File "/usr/lib/python2.5/site-packages/xen/xend/server/DevController.py", 
line 439, in readBackend
raise VmError("Device %s not connected" % devid)
VmError: Device 832 not connected

Patch was sent upstream, but not accepted as xen-4.1 is EOL by now:


For reference our bug-entry:


** Affects: xen (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: patch-forwarded-upstream

** Patch added: "xend: Fix device argument types"
   
https://bugs.launchpad.net/bugs/1564797/+attachment/4619252/+files/0041-Bug-23394-xen-change-media.patch

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1564797

Title:
  Changing media fails

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1564797/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1564797] [NEW] Changing media fails

[Philipp Hahn]

Public bug reported:

With xen-4.1.6.1 changing the CD-ROM media fails as xend mixes passing
arguments as "int" and "str".

Traceback (most recent call last):
  File "/usr/lib/python2.5/site-packages/xen/web/SrvBase.py", line 85, in 
perform
return op_method(op, req)
  File "/usr/lib/python2.5/site-packages/xen/xend/server/SrvDomain.py", line 
201, in op_device_configure
req)
  File "/usr/lib/python2.5/site-packages/xen/xend/server/SrvDomain.py", line 
171, in call
return FormFn(fn, args)(req.args)
  File "/usr/lib/python2.5/site-packages/xen/xend/Args.py", line 166, in 
__call__
return self.call_with_form_args(self.fn, fargs, xargs=xargs)
  File "/usr/lib/python2.5/site-packages/xen/xend/Args.py", line 138, in 
call_with_form_args
return fn(*params, **keys)
  File "/usr/lib/python2.5/site-packages/xen/xend/XendDomainInfo.py", line 
1099, in device_configure
dev_uuid = dev_control.reconfigureDevice(devid, dev_config)
  File "/usr/lib/python2.5/site-packages/xen/xend/server/blkif.py", line 128, 
in reconfigureDevice
(dev, mode) = self.readBackend(devid, 'dev', 'mode')
  File "/usr/lib/python2.5/site-packages/xen/xend/server/DevController.py", 
line 439, in readBackend
raise VmError("Device %s not connected" % devid)
VmError: Device 832 not connected

Patch was sent upstream, but not accepted as xen-4.1 is EOL by now:


For reference our bug-entry:


** Affects: xen (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: patch-forwarded-upstream

** Patch added: "xend: Fix device argument types"
   
https://bugs.launchpad.net/bugs/1564797/+attachment/4619252/+files/0041-Bug-23394-xen-change-media.patch

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to xen in Ubuntu.
https://bugs.launchpad.net/bugs/1564797

Title:
  Changing media fails

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1564797/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1564790] [NEW] blktap2 fails to terminate with filenames containing blanks

[Philipp Hahn]

Public bug reported:

Shutting down a domU with xen-4.1.6.1 doesn't terminate the corresponding 
blktap2
process, since one (other) VM uses a image file, which contains spaces in its
file name.  /var/log/xen/xend-debug.log has the following information:

Unhandled exception in thread started by
Traceback (most recent call last):
  File "/usr/lib/python2.6/dist-packages/xen/xend/server/BlktapController.py", 
line 199, in finishDeviceCleanup
    TapdiskController.destroy(path)
  File "/usr/lib/python2.6/dist-packages/xen/xend/server/BlktapController.py", 
line 289, in destroy
    tapdisk = TapdiskController.fromDevice(device)
  File "/usr/lib/python2.6/dist-packages/xen/xend/server/BlktapController.py", 
line 278, in fromDevice
    TapdiskController.list())
  File "/usr/lib/python2.6/dist-packages/xen/xend/server/BlktapController.py", 
line 256, in list
    key, value = pair.split('=')
ValueError: need more than 1 value to unpack

** Affects: xen (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: patch

** Patch added: "Fix tap-ctl parsing"
   
https://bugs.launchpad.net/bugs/1564790/+attachment/4619233/+files/0006-Bug-18357-Fix-tap-ctl-parsing.patch

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to xen in Ubuntu.
https://bugs.launchpad.net/bugs/1564790

Title:
  blktap2 fails to terminate with filenames containing blanks

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1564790/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1564790] [NEW] blktap2 fails to terminate with filenames containing blanks

[Philipp Hahn]

Public bug reported:

Shutting down a domU with xen-4.1.6.1 doesn't terminate the corresponding 
blktap2
process, since one (other) VM uses a image file, which contains spaces in its
file name.  /var/log/xen/xend-debug.log has the following information:

Unhandled exception in thread started by
Traceback (most recent call last):
  File "/usr/lib/python2.6/dist-packages/xen/xend/server/BlktapController.py", 
line 199, in finishDeviceCleanup
    TapdiskController.destroy(path)
  File "/usr/lib/python2.6/dist-packages/xen/xend/server/BlktapController.py", 
line 289, in destroy
    tapdisk = TapdiskController.fromDevice(device)
  File "/usr/lib/python2.6/dist-packages/xen/xend/server/BlktapController.py", 
line 278, in fromDevice
    TapdiskController.list())
  File "/usr/lib/python2.6/dist-packages/xen/xend/server/BlktapController.py", 
line 256, in list
    key, value = pair.split('=')
ValueError: need more than 1 value to unpack

** Affects: xen (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: patch

** Patch added: "Fix tap-ctl parsing"
   
https://bugs.launchpad.net/bugs/1564790/+attachment/4619233/+files/0006-Bug-18357-Fix-tap-ctl-parsing.patch

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1564790

Title:
  blktap2 fails to terminate with filenames containing blanks

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1564790/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1564792] [NEW] Somtimes 1st domU fails to start due to hotplug race

[Philipp Hahn]

Public bug reported:

Sometimes qemu/the kernel takes too long for the first domain to start with 
xen-4.1.6.1.
The hotplug script then finds the device still in state 1=Initialising and 
aborts.
Add an artifical delay of 1 seconds and try again.

** Affects: xen (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: patch

** Patch added: "Fix race during device hotplug"
   
https://bugs.launchpad.net/bugs/1564792/+attachment/4619234/+files/0003-Bug-20481-Fix-race-during-device-hotplug.patch

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1564792

Title:
  Somtimes 1st domU fails to start due to hotplug race

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1564792/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1564792] [NEW] Somtimes 1st domU fails to start due to hotplug race

[Philipp Hahn]

Public bug reported:

Sometimes qemu/the kernel takes too long for the first domain to start with 
xen-4.1.6.1.
The hotplug script then finds the device still in state 1=Initialising and 
aborts.
Add an artifical delay of 1 seconds and try again.

** Affects: xen (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: patch

** Patch added: "Fix race during device hotplug"
   
https://bugs.launchpad.net/bugs/1564792/+attachment/4619234/+files/0003-Bug-20481-Fix-race-during-device-hotplug.patch

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to xen in Ubuntu.
https://bugs.launchpad.net/bugs/1564792

Title:
  Somtimes 1st domU fails to start due to hotplug race

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1564792/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1564785] [NEW] hw/dma: Print error message only once

[Philipp Hahn]

Public bug reported:

Some Windows VMs triggers qemu-dm to print a log message multiple times
and fills up the log-file with 50 MiB / minute.

It's enough to print the message only once.

The patch was sent upstream but I never got feedback:


For reference here the entry in our bug-tracker:


** Affects: xen (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: patch

** Patch added: "hw/dma: Print error message only once"
   
https://bugs.launchpad.net/bugs/1564785/+attachment/4619232/+files/0052-Bug-35488-hw-dma-Print-error-message-only-once.patch

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to xen in Ubuntu.
https://bugs.launchpad.net/bugs/1564785

Title:
  hw/dma: Print error message only once

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1564785/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1564785] [NEW] hw/dma: Print error message only once

[Philipp Hahn]

Public bug reported:

Some Windows VMs triggers qemu-dm to print a log message multiple times
and fills up the log-file with 50 MiB / minute.

It's enough to print the message only once.

The patch was sent upstream but I never got feedback:


For reference here the entry in our bug-tracker:


** Affects: xen (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: patch

** Patch added: "hw/dma: Print error message only once"
   
https://bugs.launchpad.net/bugs/1564785/+attachment/4619232/+files/0052-Bug-35488-hw-dma-Print-error-message-only-once.patch

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1564785

Title:
  hw/dma: Print error message only once

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1564785/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1564782] [NEW] Fix hex decoding in sxp.Parser

[Philipp Hahn]

Public bug reported:

If a managed domain is creates with a name/description containing 
non-ASCII-characters, `xm list` fails in xen-4.1.6.1
This is caused by "xend" implementing its own broken hex-decoder.

The patch was sent upstream but rejected as xen-4.1 (and Python-xend)
being EOL: 

For reference here's the link to our bug-tracker:


** Affects: xen (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: patch

** Patch added: "xend: Fix hex decoding in sxp.Parser"
   
https://bugs.launchpad.net/bugs/1564782/+attachment/4619230/+files/0062-Bug-36098-xen-Fix-hex-decoding-in-sxp.Parser.patch

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to xen in Ubuntu.
https://bugs.launchpad.net/bugs/1564782

Title:
  Fix hex decoding in sxp.Parser

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1564782/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1564782] [NEW] Fix hex decoding in sxp.Parser

[Philipp Hahn]

Public bug reported:

If a managed domain is creates with a name/description containing 
non-ASCII-characters, `xm list` fails in xen-4.1.6.1
This is caused by "xend" implementing its own broken hex-decoder.

The patch was sent upstream but rejected as xen-4.1 (and Python-xend)
being EOL: 

For reference here's the link to our bug-tracker:


** Affects: xen (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: patch

** Patch added: "xend: Fix hex decoding in sxp.Parser"
   
https://bugs.launchpad.net/bugs/1564782/+attachment/4619230/+files/0062-Bug-36098-xen-Fix-hex-decoding-in-sxp.Parser.patch

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1564782

Title:
  Fix hex decoding in sxp.Parser

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1564782/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1564777] [NEW] xenstore memory corruption

[Philipp Hahn]

Public bug reported:

The C implementation of xenstored in xen-4.1.6.1 is missing commit 
de8c3e826499dbf69d01ee935a67b5d67a131496 from xen-4.6:
  tools/xenstore: Correct use of va_end() after va_copy()
This leads to data corruption which only triggers very rarely; we were never 
able to reproduce it in our test environment, but we had crashes of xenstored 
nearly each month.

For reference here's the issues from our bug-tracker:


** Affects: xen (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: patch

** Patch added: "tools/xenstore: Correct use of va_end() after va_copy()"
   
https://bugs.launchpad.net/bugs/1564777/+attachment/4619213/+files/0072-tools-xenstore-Correct-use-of-va_end-after-va_copy.patch

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1564777

Title:
  xenstore memory corruption

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1564777/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1564777] [NEW] xenstore memory corruption

[Philipp Hahn]

Public bug reported:

The C implementation of xenstored in xen-4.1.6.1 is missing commit 
de8c3e826499dbf69d01ee935a67b5d67a131496 from xen-4.6:
  tools/xenstore: Correct use of va_end() after va_copy()
This leads to data corruption which only triggers very rarely; we were never 
able to reproduce it in our test environment, but we had crashes of xenstored 
nearly each month.

For reference here's the issues from our bug-tracker:


** Affects: xen (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: patch

** Patch added: "tools/xenstore: Correct use of va_end() after va_copy()"
   
https://bugs.launchpad.net/bugs/1564777/+attachment/4619213/+files/0072-tools-xenstore-Correct-use-of-va_end-after-va_copy.patch

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to xen in Ubuntu.
https://bugs.launchpad.net/bugs/1564777

Title:
  xenstore memory corruption

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1564777/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1515145] Re: xm migrate --live panics hypervisor

[Philipp Hahn]

Backport 3b0bcb8 x86/mm/p2m: Move p2m code in HVMOP_[gs]et_mem_access
into p2m.c

** Patch added: "Backport 3b0bcb8"
   
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1515145/+attachment/4619207/+files/0002-x86-mm-p2m-Move-p2m-code-in-HVMOP_-gs-et_mem_access-.patch

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1515145

Title:
  xm migrate --live panics hypervisor

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1515145/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1515145] Re: xm migrate --live panics hypervisor

[Philipp Hahn]

The first patch does not work!

The backport was quiet complicates as that patch is in the middle of
4) eca988d x86/mm: merge the shadow, hap and log-dirty locks into a single 
paging lock.
3) 5bf494a x86/mm: Make MM locks recursive.
2) 301493f x86/mm: dedup the various copies of the shadow lock functions
1) 3b0bcb8 x86/mm/p2m: Move p2m code in HVMOP_[gs]et_mem_access into p2m.c

2) and 4) are already in debian/patches/xsa97-hap-4.1-prereq.patch, so
the patch also contains the parts from eca988d which where skipped as
5bf494a was not back-ported.

This patch also requires a back-port of
3b0bcb890955e1c3e2fde10a026c5d85481e6fb8 (1) as compilation failes
otherwise - I'll attach that next - as an alternative it could be enough
to '#include "../mm-locks.h"' instead, but I didn't test that.

** Patch added: "Fixed patch v2"
   
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1515145/+attachment/4619204/+files/0003-x86-mm-Make-MM-locks-recursive.patch

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1515145

Title:
  xm migrate --live panics hypervisor

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1515145/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1515145] Re: xm migrate --live panics hypervisor

[Philipp Hahn]

The first patch does not work!

The backport was quiet complicates as that patch is in the middle of
4) eca988d x86/mm: merge the shadow, hap and log-dirty locks into a single 
paging lock.
3) 5bf494a x86/mm: Make MM locks recursive.
2) 301493f x86/mm: dedup the various copies of the shadow lock functions
1) 3b0bcb8 x86/mm/p2m: Move p2m code in HVMOP_[gs]et_mem_access into p2m.c

2) and 4) are already in debian/patches/xsa97-hap-4.1-prereq.patch, so
the patch also contains the parts from eca988d which where skipped as
5bf494a was not back-ported.

This patch also requires a back-port of
3b0bcb890955e1c3e2fde10a026c5d85481e6fb8 (1) as compilation failes
otherwise - I'll attach that next - as an alternative it could be enough
to '#include "../mm-locks.h"' instead, but I didn't test that.

** Patch added: "Fixed patch v2"
   
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1515145/+attachment/4619204/+files/0003-x86-mm-Make-MM-locks-recursive.patch

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to xen in Ubuntu.
https://bugs.launchpad.net/bugs/1515145

Title:
  xm migrate --live panics hypervisor

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1515145/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1515145] Re: xm migrate --live panics hypervisor

[Philipp Hahn]

Backport 3b0bcb8 x86/mm/p2m: Move p2m code in HVMOP_[gs]et_mem_access
into p2m.c

** Patch added: "Backport 3b0bcb8"
   
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1515145/+attachment/4619207/+files/0002-x86-mm-p2m-Move-p2m-code-in-HVMOP_-gs-et_mem_access-.patch

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to xen in Ubuntu.
https://bugs.launchpad.net/bugs/1515145

Title:
  xm migrate --live panics hypervisor

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1515145/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1515145] Re: xm migrate --live panics hypervisor

[Philipp Hahn]

debian/patches/xsa97-hap-4.1-prereq.patch is the combination of
 * commit 301493fb027648db6808b66d1ccf849f524b8422
   x86/mm: dedup the various copies of the shadow lock functions
 * commit eca988de7381e5efe58792dc166611e4523d33b3
   x86/mm: merge the shadow, hap and log-dirty locks into a single paging lock.

but it's missing 
 * commit 5bf494a7bf3674f32ebaab1b70b76e5f174812a3
   x86/mm: Make MM locks recursive.

which leads to a recursive locking call to crash the hypervisor.

With the patch applied "xm migrate -c -l $dom $host" works again.

** Patch added: "x86/mm: Make MM locks recursive."
   
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1515145/+attachment/4617139/+files/0001-x86-mm-Make-MM-locks-recursive.patch

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to xen in Ubuntu.
https://bugs.launchpad.net/bugs/1515145

Title:
  xm migrate --live panics hypervisor

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1515145/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1515145] Re: xm migrate --live panics hypervisor

[Philipp Hahn]

debian/patches/xsa97-hap-4.1-prereq.patch is the combination of
 * commit 301493fb027648db6808b66d1ccf849f524b8422
   x86/mm: dedup the various copies of the shadow lock functions
 * commit eca988de7381e5efe58792dc166611e4523d33b3
   x86/mm: merge the shadow, hap and log-dirty locks into a single paging lock.

but it's missing 
 * commit 5bf494a7bf3674f32ebaab1b70b76e5f174812a3
   x86/mm: Make MM locks recursive.

which leads to a recursive locking call to crash the hypervisor.

With the patch applied "xm migrate -c -l $dom $host" works again.

** Patch added: "x86/mm: Make MM locks recursive."
   
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1515145/+attachment/4617139/+files/0001-x86-mm-Make-MM-locks-recursive.patch

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1515145

Title:
  xm migrate --live panics hypervisor

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1515145/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1515145] Re: xm migrate --live panics hypervisor

[Philipp Hahn]

Reverting the following patches makes the crash go away 
(4.1.6.1-0ubuntu0.12.04.8):
* xsa97-hap-4.1-prereq.patch
* xsa97-hap-4.2-prereq.patch
* xsa97-hap-4.2.patch

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1515145

Title:
  xm migrate --live panics hypervisor

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1515145/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1515145] Re: xm migrate --live panics hypervisor

[Philipp Hahn]

Reverting the following patches makes the crash go away 
(4.1.6.1-0ubuntu0.12.04.8):
* xsa97-hap-4.1-prereq.patch
* xsa97-hap-4.2-prereq.patch
* xsa97-hap-4.2.patch

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to xen in Ubuntu.
https://bugs.launchpad.net/bugs/1515145

Title:
  xm migrate --live panics hypervisor

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1515145/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1543980] Re: Kernel 3.13.0-77 crashes (can be triggered by Samba)

[Philipp Hahn]

More broken kernel versions:
v3.14: 9d054f57adc981a5f503d5eb9b259aa450b90dc5
v3.12: 9964b4c4ee925b2910723e509abd7241cff1ef84
v3.10: da8db0830a2ce63f628150307a01a315f5081202
ckt/linux-3.13.y: 6505b15f7f7efde1853b5a7641e9ce675c2b1a96
v3.4: -
v3.2: a3b0f6e8a21ef02f69a15abac440572d8cde8c2a

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1543980

Title:
  Kernel 3.13.0-77 crashes (can be triggered by Samba)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1543980/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1543980] Re: Kernel 3.13.0-77 crashes (can be triggered by Samba)

[Philipp Hahn]

This is the 4.5 commit:


For 4.4 it is in review right now for 4.4.4 as announced by greg k-h
yesterday: 

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1543980

Title:
  Kernel 3.13.0-77 crashes (can be triggered by Samba)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1543980/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Re: [Bug 1543980] Re: Kernel 3.13.0-77 crashes (can be triggered by Samba)

[Philipp Hahn]

Hello,

Am 23.02.2016 um 08:34 schrieb Stefan Metzmacher:
> https://forge.univention.org/bugzilla/show_bug.cgi?id=40558#c11
> 
> Indicates that commit
> 51cd3ed4c41b3895869925b99dd95a704bd2c91a unix: avoid use-after-free in 
> ep_remove_wait_queue
> should be reverted in order to avoid this regression.
> 
> Can we please get some progress on this?

Rainer Weikusat sent a patch named
 [PATCH net] af_unix: Guard against other == sk in unix_dgram_sendmsg
 
which fixes the problem.


For our distribution we released chose to revert the original patch as
we needed a working kernel as fast as possible, as several of our
customers were hit by that bug.

I tested the patch from Rainer and it also made the bug disappear.
David Miller also picked the patch for stable and we will do the same
when next be build a new kernel for our release.

Philipp

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1543980

Title:
  Kernel 3.13.0-77 crashes (can be triggered by Samba)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1543980/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1543980] Re: Kernel 3.13.0-77 crashes (can be triggered by Samba)

[Philipp Hahn]

Reverting the patch "unix: avoid use-after-free in ep_remove_wait_queue"
in 4.1 fixes my problem (for now). The original patch went into 4.4, but
was back-ported to several stable trees:

v3.2: a3b0f6e8a21ef02f69a15abac440572d8cde8c2a
v3.18: 72032798034d921ed565e3bf8dfdc3098f6473e2
v4.1: 5c77e26862ce604edea05b3442ed765e9756fe0f
v4.2: bad967fdd8ecbdd171f5f243657be033d2d081a7
v4.3: 58a6a46a036ce81a2a8ecaa6fc1537c894349e3f
v4.4: 7d267278a9ece963d77eefec61630223fce08c6c

See 

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1543980

Title:
  Kernel 3.13.0-77 crashes (can be triggered by Samba)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1543980/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1543980] Re: Kernel 3.13.0-77 crashes (can be triggered by Samba)

[Philipp Hahn]

We've seen similar reports of (always) smbd getting stuck with our own
4.1.16 kernel:


The common patch from my research so far looks like "unix: properly
account for FDs passed over unix sockets", which might have introduced
some suitable locking problem. It has been back-ported from 4.4 to
several kernels by now.

I'm not able to reproduce the bug with samba3.raw.composite in my 8 vCPU KVM 
environment.
Some time ago I had a similar bug which I could only trigger on real-HW with 8 
CPU.

** Bug watch added: forge.univention.org/bugzilla/ #40558
   https://forge.univention.org/bugzilla/show_bug.cgi?id=40558

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1543980

Title:
  Kernel 3.13.0-77 crashes (can be triggered by Samba)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-lts-trusty/+bug/1543980/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs