search for: chunk_free

..., a number of struct nouveau_dmem_chunk are allocated and put on the dmem->chunk_empty list. Then in nouveau_dmem_pages_alloc(), a nouveau_dmem_chunk is removed from the list and GPU memory is allocated. However, the nouveau_dmem_chunk is never removed from the chunk_empty list nor placed on the chunk_free or chunk_full lists. This results in only one chunk ever being actually used (2MB) and quickly leads to migration to device private memory failures. Fix this by having just one list of free device private pages and if no pages are free, allocate a chunk of device private pages and GPU memory. Sig...

...in 1:100) example(nspairs) nspars> an1 <- ann(cbind(runif(1000), runif(1000)), k = 4) nspars> nspairs(an1) [1] 311 nspars> an1 <- ann(cbind(runif(1000), runif(1000)), k = 4) nspars> nspairs(an1) [1] 304 .... Program received signal SIGSEGV, Segmentation fault. 0x40111109 in chunk_free (ar_ptr=0x401a5d40, p=0x94723a8) at malloc.c:3111 3111 malloc.c: No such file or directory. (gdb) bt #0 0x40111109 in chunk_free (ar_ptr=0x401a5d40, p=0x94723a8) at malloc.c:3111 #1 0x40110f9a in __libc_free (mem=0x94727d0) at malloc.c:3023 #2 0x80a6b60 in ReleaseLargeFreeVectors () at memory.c:...

...Linux release 7.3 (Valhalla) Kernel 2.4.18-5 on an i686 gcc-2.96-110 glibc-2.2.5-36 Encoding "04_imiuta.wav" to "04_imiuta.ogg" at quality 1.00 [100.0%] [ 0m00s remaining] \Segmentation fault Program received signal SIGSEGV, Segmentation fault. 0x4207af66 in chunk_free () from /lib/i686/libc.so.6 (gdb) bt #0 0x4207af66 in chunk_free () from /lib/i686/libc.so.6 #1 0x4207ad14 in free () from /lib/i686/libc.so.6 #2 0x400c5f1c in _ve_envelope_clear () from /home/icecast/lib/libvorbis.so.0 #3 0x400c4ad5 in vorbis_dsp_clear () from /home/icecast/lib/libvorbis.so.0...

...ocal exploitation on little endian Linux is confirmed to be trivial > via recipient.c and sendtolist(), with a pointer overwrite leading to a > neat case of free() on user-supplied data, i.e.: > > eip = 0x40178ae2 > edx = 0x41414141 > esi = 0x61616161 > > SEGV in chunk_free (ar_ptr=0x4022a160, p=0x81337e0) at malloc.c:3242 > > 0x40178ae2 <chunk_free+486>: mov %esi,0xc(%edx) > 0x40178ae5 <chunk_free+489>: mov %edx,0x8(%esi) > > Remote attack is believed to be possible. > >---------------- >Workaround / fix >-----...

...492d..35b6e83ead8a 100644 --- a/drivers/gpu/drm/nouveau/nouveau_dmem.c +++ b/drivers/gpu/drm/nouveau/nouveau_dmem.c @@ -593,6 +593,11 @@ nouveau_dmem_init(struct nouveau_drm *drm) unsigned long i, size; int ret; + mutex_init(&drm->dmem->mutex); + INIT_LIST_HEAD(&drm->dmem->chunk_free); + INIT_LIST_HEAD(&drm->dmem->chunk_full); + INIT_LIST_HEAD(&drm->dmem->chunk_empty); + /* This only make sense on PASCAL or newer */ if (drm->client.device.info.family < NV_DEVICE_INFO_V0_PASCAL) return; @@ -600,11 +605,6 @@ nouveau_dmem_init(struct nouveau_drm *d...

...hough the problem isn't in R - I provoked a SIGSEGV under R 1.1.1 on RH62: > for (i in 1:100) an1 <- ann(cbind(runif(1000), runif(1000)), k = 4) > for (i in 1:100) an1 <- ann(cbind(runif(1001), runif(1001)), k = 4) Program received signal SIGSEGV, Segmentation fault. 0x40111109 in chunk_free (ar_ptr=0x401a5d40, p=0x8849a30) at malloc.c:3111 3111 malloc.c: No such file or directory. (gdb) bt #0 0x40111109 in chunk_free (ar_ptr=0x401a5d40, p=0x8849a30) at malloc.c:3111 #1 0x40110f9a in __libc_free (mem=0x8849a38) at malloc.c:3023 #2 0x4002c814 in _rl_free_history_entry () from /usr...

.../lib/ld-linux.so.2...done. Reading symbols from /lib/libnss_files.so.2...done. Reading symbols from /lib/libnss_nisplus.so.2...done. Reading symbols from /lib/libnss_nis.so.2...done. Reading symbols from /lib/libnss_dns.so.2...done. Reading symbols from /lib/libresolv.so.2...done. #0 0x4019d109 in chunk_free (ar_ptr=0x40231d40, p=0x808cf38) at malloc.c:3111 3111 malloc.c: No such file or directory. (gdb) backtrace #0 0x4019d109 in chunk_free (ar_ptr=0x40231d40, p=0x808cf38) at malloc.c:3111 #1 0x4019cf9a in __libc_free (mem=0x808cf40) at malloc.c:3023 #2 0x8067452 in error () #3 0x80534ab in EVP_ge...

...figured as "i386-redhat-linux"... Core was generated by `genauth 100'. Program terminated with signal 11, Segmentation fault. Reading symbols from /usr/lib/libgmp.so.2...done. Reading symbols from /lib/libc.so.6...done. Reading symbols from /lib/ld-linux.so.2...done. #0 0x4008d129 in chunk_free (ar_ptr=0x40121d60, p=0x8049cd8) at malloc.c:3111 3111 malloc.c: No such file or directory. (gdb) where #0 0x4008d129 in chunk_free (ar_ptr=0x40121d60, p=0x8049cd8) at malloc.c:3111 #1 0x4008cfba in __libc_free (mem=0x8049ce0) at malloc.c:3023 #2 0x400854ab in _IO_new_fclose (fp=0x8049ce0) at...

.../local/bin/ogg123 --device=oss xxx Opening devices... Device: OSS audio driver output Author: Aaron Holtzman <aholtzma@ess.engr.uvic.ca> Comments: Outputs audio to the Open Sound System driver. Playing from file xxx. Program received signal SIGSEGV, Segmentation fault. 0x20000833908 in chunk_free () from /lib/libc.so.6.1 (gdb) backtrace #0 0x20000833908 in chunk_free () from /lib/libc.so.6.1 #1 0x20000833504 in chunk_alloc () from /lib/libc.so.6.1 #2 0x20000834b60 in __libc_calloc () from /lib/libc.so.6.1 #3 0x20000239f60 in _vorbis_unpack_books () from /usr/lib/libvorbis.so.0 #4 0x200...

...nouveau_dmem_chunk are allocated > and put on the dmem->chunk_empty list. Then in nouveau_dmem_pages_alloc(), > a nouveau_dmem_chunk is removed from the list and GPU memory is allocated. > However, the nouveau_dmem_chunk is never removed from the chunk_empty > list nor placed on the chunk_free or chunk_full lists. This results > in only one chunk ever being actually used (2MB) and quickly leads to > migration to device private memory failures. > > Fix this by having just one list of free device private pages and if no > pages are free, allocate a chunk of device private p...

...debug1: generating fake skeyinfo for blah. Segmentation fault (core dumped) [root at x openssh-2.3.0p1]# Funny enough, core file is created in the root (/core) - I am not sure if that is 'expected' behavior - never had sshd crash before :) gdb output shows: (gdb) where #0 0x400ae0d6 in chunk_free (ar_ptr=0x40142d60, p=0x80f3948) at malloc.c:3097 #1 0x400ade46 in chunk_alloc (ar_ptr=0x40142d60, nb=24) at malloc.c:2594 #2 0x400ad5ce in __libc_malloc (bytes=15) at malloc.c:2696 #3 0x400b2a29 in __strdup (s=0x4013b731 "/etc/localtime") at strdup.c:43 #4 0x400dd3c0 in tzset_interna...

The new code is dedicated to calculate free inodes number of all inode_allocs, then return the info to userpace in terms of an array. Specially, flag 'OCFS2_INFO_FL_NON_COHERENT', manipulated by '--cluster-coherent' from userspace, is now going to be involved. setting the flag on means no cluster coherency considered, usually, userspace tools choose none-coherency strategy by

Hi, just for your information and maybe for some help: with 5.1rc1 and SVM enabled i see the following backtrace [1] when the nouveau card (reverse prime) goes to sleep, for now i have papered over with [2] which leaves me with userspace hangs. Any pointers where to look for the actual culprit? PS: Card is: nouveau 0000:01:00.0: NVIDIA GP106 (136000a1) Greetings, Tobias [1]: BUG: unable

Hi Dan, Jérôme and Jason, below is a series that cleans up the dev_pagemap interface so that it is more easily usable, which removes the need to wrap it in hmm and thus allowing to kill a lot of code Note: this series is on top of the rdma/hmm branch + the dev_pagemap releas fix series from Dan that went into 5.2-rc5. Git tree: git://git.infradead.org/users/hch/misc.git

Hi Dan, Jérôme and Jason, below is a series that cleans up the dev_pagemap interface so that it is more easily usable, which removes the need to wrap it in hmm and thus allowing to kill a lot of code Diffstat: 22 files changed, 245 insertions(+), 802 deletions(-) Git tree: git://git.infradead.org/users/hch/misc.git hmm-devmem-cleanup Gitweb:

Hi Dan, Jérôme and Jason, below is a series that cleans up the dev_pagemap interface so that it is more easily usable, which removes the need to wrap it in hmm and thus allowing to kill a lot of code Note: this series is on top of Linux 5.2-rc5 and has some minor conflicts with the hmm tree that are easy to resolve. Diffstat summary: 32 files changed, 361 insertions(+), 1012 deletions(-) Git