[Pkg-fglrx-devel] Bug#809638: Fwd: Re: Bug#809638: fglrx-driver 15.9 + Linux 4.3.0-1-amd64: NULL pointer dereference at fireglPcsCommand+0x90/0x140

[Andreas Beckmann]

-------- Forwarded Message --------
Subject: Re: Bug#809638: fglrx-driver 15.9 + Linux 4.3.0-1-amd64: NULL
pointer dereference at fireglPcsCommand+0x90/0x140
Date: Mon, 18 Jan 2016 11:42:09 +0100
From: Jens Schmidt <crashdump at meine-dateien.info>
To: Andreas Beckmann <anbe at debian.org>

Am 18.01.2016 um 01:43 schrieb Andreas Beckmann:
> On 2016-01-14 22:56, Andreas Beckmann wrote:
>> Hi all,
>>
>> please let's discuss this issue on this merged bug (#809638) only, and
>> when replying keep everyone Cc:ed who previously reported this issue.
>>
>> On 2016-01-02 10:37, Roman Lebedev wrote:
>>> It happens only on this kernel version, on 4.2.0 it is fine.
>>
>> Has anyone tried Linux 4.4.x from experimental? (The module from
>> fglrx-driver 1:15.9-4 should compile for 4.4)
> 
> I just uploaded 1:15.12-1 to experimental - please give it a try with
> both 4.3 and 4.4.
> 
> Thanks!
> 
> 
> Andreas
> 

Same error with kernel 4.3.3-5 and latest fglrx (version 1:15.9-4). NULL
pointer in function fireglPcsCommand(). This bug triggers immediately
when loading module.


BTW: Kernel 4.2.6-3 works fine with fglrx 1:15.9-4


Extracted from dmesg:
-----
[   24.792715] fglrx: module license 'Proprietary. (C) 2002 - ATI
Technologies, Starnberg, GERMANY' taints kernel.
[   24.792721] Disabling lock debugging due to kernel taint
[   24.824359] <6>[fglrx] Maximum main memory to use for locked dma
buffers: 7737 MBytes.
[   24.824709] <6>[fglrx]   vendor: 1002 device: 6759 revision: 0 count: 1
[   24.825378] <6>[fglrx] ioport: bar 4, base 0xc000, size: 0x100
[   24.825740] <6>[fglrx] Kernel PAT support is enabled
[   24.825757] BUG: unable to handle kernel NULL pointer dereference at
00000000000003e0
[   24.827736] IP: [<ffffffffa0646510>] fireglPcsCommand+0x90/0x140 [fglrx]
[   24.829802] PGD 0
[   24.831831] Oops: 0000 [#1] SMP
[   24.833792] Modules linked in: fglrx(PO+) kvm snd_pcm pcspkr psmouse
serio_raw snd_timer snd edac_mce_amd edac_core fam15h_power shpchp sg
ac97_bus gameport soundcore wmi 8250_fintek i2c_piix4 asus_atk0110
button acpi_cpufreq processor usbserial nf_conntrack_sane nf_conntrack
parport_pc ppdev lp parport autofs4 ext4 crc16 mbcache jbd2
serpent_avx_x86_64 serpent_sse2_x86_64 serpent_generic xts
algif_skcipher af_alg uvesafb loop dm_crypt dm_mod hid_generic usbhid
hid sr_mod cdrom sd_mod ata_generic uas usb_storage crct10dif_pclmul
crc32_pclmul crc32c_intel jitterentropy_rng sha256_ssse3 sha256_generic
hmac ohci_pci drbg ansi_cprng aesni_intel aes_x86_64 lrw gf128mul
glue_helper ablk_helper cryptd ahci pata_atiixp libahci xhci_pci
ohci_hcd ehci_pci libata xhci_hcd ehci_hcd scsi_mod r8169 usbcore mii
[   24.842791]  usb_common
[   24.845044] CPU: 3 PID: 617 Comm: systemd-udevd Tainted: P
O    4.3.0-1-amd64 #1 Debian 4.3.3-5
[   24.847376] Hardware name: System manufacturer System Product
Name/M5A78L-M/USB3, BIOS 2001    09/11/2014
[   24.849716] task: ffff8800cb870d80 ti: ffff8800cb868000 task.ti:
ffff8800cb868000
[   24.852062] RIP: 0010:[<ffffffffa0646510>]  [<ffffffffa0646510>]
fireglPcsCommand+0x90/0x140 [fglrx]
[   24.854507] RSP: 0018:ffff8800cb86bb08  EFLAGS: 00010202
[   24.856871] RAX: 0000000400000168 RBX: ffffffffa066a775 RCX:
0000000000000008
[   24.859243] RDX: 0000000000000001 RSI: ffffffffa066ab55 RDI:
ffffffffa122ae00
[   24.861598] RBP: 00000000000003e0 R08: 0000000000000000 R09:
00000000342484c7
[   24.863924] R10: 000000000f800000 R11: 0000000000000322 R12:
0000000000000000
[   24.866216] R13: 0000000000000000 R14: 0000000000000000 R15:
ffffffffa08cb045
[   24.868479] FS:  00007f10640d38c0(0000) GS:ffff88022ecc0000(0000)
knlGS:0000000000000000
[   24.870752] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   24.873019] CR2: 00000000000003e0 CR3: 00000000ca06b000 CR4:
00000000000406e0
[   24.875298] Stack:
[   24.877552]  ffffffff342484c7 382484c748000000 4800000000000001
8d000001402484c7
[   24.879846]  0000000400000168 00000000538b4800 ffffffffff0a0004
ffff8800cb86bc47
[   24.882152]  00000000000000f8 000000000000000f 0000000000000000
ffffffffa066a7ca
[   24.884454] Call Trace:
[   24.886801]  [<ffffffffa066a7ca>] ?
firegl_postinit_debugger+0x18a/0x230 [fglrx]
[   24.889121]  [<ffffffff81582e8e>] ? mutex_lock+0xe/0x30
[   24.891423]  [<ffffffff81401626>] ? kobj_map+0x156/0x180
[   24.893696]  [<ffffffff811d11b0>] ? cdev_get+0x40/0x40
[   24.895927]  [<ffffffff811d0f80>] ? mount_fs+0x160/0x160
[   24.898133]  [<ffffffff811d1215>] ? cdev_add+0x45/0x50
[   24.900313]  [<ffffffff811d15e5>] ? __register_chrdev+0x75/0xe0
[   24.902542]  [<ffffffffa13023a3>] ? firegl_init_module+0x3a3/0x1000
[fglrx]
[   24.904731]  [<ffffffff8115dff3>] ? do_init_module+0x5b/0x1dc
[   24.906899]  [<ffffffff810f0f63>] ? load_module+0x2173/0x2780
[   24.909054]  [<ffffffff810ed6e0>] ? __symbol_put+0x60/0x60
[   24.911219]  [<ffffffff811d2bbb>] ? kernel_read+0x4b/0x70
[   24.913373]  [<ffffffff810f179e>] ? SyS_finit_module+0xae/0xe0
[   24.915513]  [<ffffffff81584db2>] ? system_call_fast_compare_end+0xc/0x67
[   24.917661] Code: c2 39 cb 8c a0 e8 01 46 02 00 48 8b 43 40 48 85 c0
74 18 44 8b 0b 45 85 c9 75 10 49 89 c4 48 c7 43 40 00 00 00 00 44 8b 6b
38 90 <48> 8b 7d 00 e8 a7 f4 ff ff 48 89 de 48 8b 78 38 e8 bb 5a 20 00
[   24.922319] RIP  [<ffffffffa0646510>] fireglPcsCommand+0x90/0x140 [fglrx]
[   24.924688]  RSP <ffff8800cb86bb08>
[   24.926984] CR2: 00000000000003e0
[   24.929309] ---[ end trace 57dbfd23c37c08df ]---

-----