Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 17 Sep 2019 18:04:46 +0200
From: Adam Zabrocki <pi3@....com.pl>
To: lkrg-users@...ts.openwall.com
Subject: Re: lkrg-0.7 lkrg.hide=1 causes LOST MODULE

Hi,

I've tested attached patch and it should works fine. Nevertheless, before 
merging it into the official repo I would be thankful if you could make some 
tests on your side as well.

Best regards,
Adam

On Tue, Sep 17, 2019 at 12:37:23AM +0200, Adam Zabrocki wrote:
> Hi,
> 
> Thanks for the report.
> 
> On Mon, Sep 16, 2019 at 02:09:19PM +0300, Alexander V. Gusev wrote:
> > Hi!
> > 
> > I am having trouble with sysctl lkrg.hide. lkrg-0.7 is
> > compiled from source on Debian 10 (4.19.37-5). I insmod
> > p_lkrg.ko, then do:
> > 
> >   sysctl lrkg.hide=1
> > 
> > In a few seconds lkrg starts complaining that a module has
> > been lost and is missing from module list. Looks like lkrg
> > forgot that it's himself that is missing because it just
> > did hide itself!
> > 
> > Perhaps I am missing something or doing something wrong?
> > 
> 
> Nope, you are doing everything right. I've not put too much attention to this 
> functionality. 0.7 re-enabled self-hashing feature but I miss 'hide' path and 
> this is the reason of that issue. I will try to address this issue and let you 
> know about the patch.
> 
> Thanks,
> Adam
> 
> > dmesg output is as follows:
> > 
> > [p_lkrg] ALERT !!! FOUND LESS[1] MODULES IN CURRENT SYSTEM IN 
> >   MODULE LIST[63] THAN IN DB MODULE LIST[64]
> > [p_lkrg] LOST MODULE:
> > module at addr[000000002061e0af] module core[000000008fbf4b8b] 
> >   with size[0x11000] hash[0xd71b46568b40ba8f]
> > [p_lkrg] ** STRANGE BEHAVIOUR DETECTED - MODULE FOUND IN DB BUT 
> >   NOT IN OS !! **
> >               ** RACE CONDITION MIGHT APPEARED WHEN SYSTEM WAS 
> >               REBUILDING DATABASE **
> > [p_lkrg] ALERT !!! FOUND LESS[1] MODULES IN CURRENT SYSTEM IN 
> > KOBJ[63] THAN IN DB KOBJ[64]
> > [p_lkrg] LOST MODULE:
> > module at addr[000000002061e0af] module core[000000008fbf4b8b] 
> > with size[0x11000] hash[0xd71b46568b40ba8f]
> > [p_lkrg] ** STRANGE BEHAVIOUR DETECTED - MODULE FOUND IN DB BUT 
> > NOT IN OS !! **
> >               ** RACE CONDITION MIGHT APPEARED WHEN SYSTEM WAS 
> >               REBUILDING DATABASE **
> > [p_lkrg] System is clean!
> > 
> > Thanks!
> 
> -- 
> pi3 (pi3ki31ny) - pi3 (at) itsec pl
> http://pi3.com.pl
> 

-- 
pi3 (pi3ki31ny) - pi3 (at) itsec pl
http://pi3.com.pl


View attachment "p_lkrg_hide_patch.diff" of type "text/x-diff" (3054 bytes)

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.