[Pkg-samba-maint] Bug#463402: smbfs: Crash when trying to mount remote cifs share

[Steve Langasek]

reassign 463402 linux-2.6
found 463402 2.6.23-1
thanks

On Thu, Jan 31, 2008 at 02:21:19PM +0100, Tobbe Eriksson wrote:
> when trying to mount a remote share on a Iomega Network Hard Drive using 
> the following command:

> mount //server/stuff /mnt/server -t cifs -o ip=192.168.4.14,user=xxx,pass=xxx

> it crashes. This works fine from another machine running Etch x86 but 
> not with this sid AMD64 box.

> Unable to handle kernel NULL pointer dereference at 0000000000000010 
> RIP: 
>  [<ffffffff88c17aad>] :cifs:cifs_strfromUCS_le+0x61/0x74
> PGD a3a3c067 PUD a4734067 PMD 0 
> Oops: 0002 [2] SMP 
> CPU 1 
> Modules linked in: nls_iso8859_1 cifs nvidia(P) binfmt_misc ppdev 
> parport_pc lp parport nfs lockd nfs_acl sunrpc ac battery fuse dm_crypt 
> dm_mod firewire_sbp2 loop snd_emu10k1_synth snd_emux_synth 
> snd_seq_virmidi snd_seq_midi_emul snd_emu10k1 snd_seq_dummy snd_seq_oss 
> snd_seq_midi snd_seq_midi_event snd_seq snd_rawmidi firmware_class 
> snd_ac97_codec ac97_bus snd_pcm_oss snd_mixer_oss snd_pcm snd_seq_device 
> snd_timer snd_page_alloc snd_util_mem snd_hwdep i2c_i801 atl1 emu10k1_gp 
> snd i2c_core button soundcore gameport mii iTCO_wdt intel_agp pcspkr 
> tsdev evdev ext3 jbd mbcache sd_mod ide_cd cdrom ata_generic usbhid hid 
> ata_piix generic floppy jmicron ide_core firewire_ohci firewire_core 
> crc_itu_t ahci ehci_hcd libata scsi_mod uhci_hcd thermal processor fan
> Pid: 3924, comm: mount.cifs Tainted: P      D 2.6.23-1-amd64 #1
> RIP: 0010:[<ffffffff88c17aad>]  [<ffffffff88c17aad>] 
> :cifs:cifs_strfromUCS_le+0x61/0x74
> RSP: 0018:ffff8100a3ec7908  EFLAGS: 00010246
> RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff88c35fe0
> RDX: 0000000000000000 RSI: ffff8100a4618dee RDI: 0000000000000010
> RBP: ffff8100a4618dee R08: ffff8100b2cc4478 R09: ffff8100a3ec77c8
> R10: 0000000000000000 R11: ffffffff802663e8 R12: ffff8100b566a1c0
> R13: 0000000000000000 R14: 0000000000000010 R15: ffffffff88c35fe0
> FS:  00002b17d6c6b6e0(0000) GS:ffff8100013f1c40(0000) 
> knlGS:0000000000000000
> CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
> CR2: 0000000000000010 CR3: 00000000a4283000 CR4: 00000000000006e0
> DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
> DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
> Process mount.cifs (pid: 3924, threadinfo ffff8100a3ec6000, task 
> ffff8100a849e040)
> Stack:  0000000000000001 0000000000000000 0000000000000005 
> ffff8100b566a1c0
>  0000000000000000 ffff8100a4618dee 0000000000000001 ffffffff88c1a50d
>  ffff8100a3ec79bc ffffffff88c35fe0 ffff8100a5c67800 00000000b2cc4400
> Call Trace:
>  [<ffffffff88c1a50d>] :cifs:CIFS_SessSetup+0x4f6/0x7d1
>  [<ffffffff88c077ca>] :cifs:cifs_setup_session+0x11d/0xbd1
>  [<ffffffff80268bcd>] get_page_from_freelist+0x3d4/0x550
>  [<ffffffff802845ed>] cache_alloc_refill+0xdb/0x1da
>  [<ffffffff802cf55c>] find_nls+0x29/0x89
>  [<ffffffff88c0ac00>] :cifs:cifs_mount+0x1bbc/0x21d7
>  [<ffffffff802fe183>] idr_get_new+0xb/0x28
>  [<ffffffff8028b846>] set_anon_super+0x3c/0xab
>  [<ffffffff8028b80a>] set_anon_super+0x0/0xab
>  [<ffffffff88bfe641>] :cifs:cifs_get_sb+0x9e/0x1bf
>  [<ffffffff8028b3a6>] vfs_kern_mount+0x93/0x123
>  [<ffffffff8028b485>] do_kern_mount+0x43/0xdd
>  [<ffffffff8029ee68>] do_mount+0x691/0x705
>  [<ffffffff80264442>] find_lock_page+0x26/0xa1
>  [<ffffffff802713b8>] handle_mm_fault+0x390/0x773
>  [<ffffffff80300dcf>] __up_read+0x13/0x8a
>  [<ffffffff802232dc>] do_page_fault+0x430/0x7a4
>  [<ffffffff80271434>] handle_mm_fault+0x40c/0x773
>  [<ffffffff80291a3b>] getname+0x14c/0x191
>  [<ffffffff8026e62d>] zone_statistics+0x3f/0x60
>  [<ffffffff8029d839>] copy_mount_options+0xce/0x126
>  [<ffffffff8029ef66>] sys_mount+0x8a/0xd4
>  [<ffffffff8020bdee>] system_call+0x7e/0x83

Bug in the kernel driver; reassigning to the corresponding package.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org