[Bug 275061] net/realtek-re-kmod causes memory modification after free

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 13 Nov 2023 20:39:51 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=275061

            Bug ID: 275061
           Summary: net/realtek-re-kmod causes memory modification after
                    free
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: ale@FreeBSD.org
          Reporter: karels@freebsd.org
             Flags: maintainer-feedback?(ale@FreeBSD.org)
          Assignee: ale@FreeBSD.org

Created attachment 246276
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=246276&action=edit
crashinfo output for one crash

I tried to switch a 15-CURRENT system from em interface to re using the driver
from packages today.  It caused crashes twice while the system was still
starting up before I gave up.  One was in nfs code, one in tcp code, allocating
an mbuf.  The memory was modified at an offset of 8, changing deadc0de to
deadbdc2.  I'll attach a crashinfo report.  The system has been running fairly
reliably.  It has local kernel modifications, but not in the network code.

Background info:

package:
realtek-re-kmod-198.00_3       Kernel driver for Realtek PCIe Ethernet
Controllers

The module appears to have been updated Oct. 27, and is still current.

boot messages:
re0: <Realtek PCIe 2.5GbE Family Controller> port 0x6000-0x60ff mem
0x44000000-0x4400ffff,0x44010000-0x44013fff at device 0.0 on pci4
re0: Using Memory Mapping!
re0: Using 1 MSI-X message
re0: ASPM disabled
re0: version:1.98.00
re0: Ethernet address: d8:5e:d3:xx:xx:xx

pciconf -lv:
re0@pci0:5:0:0: class=0x020000 rev=0x05 hdr=0x00 vendor=0x10ec device=0x8125
subvendor=0x1458 subdevice=0xe000
    vendor     = 'Realtek Semiconductor Co., Ltd.'
    device     = 'RTL8125 2.5GbE Controller'
    class      = network
    subclass   = ethernet

The kernel was at e716630d4cf8 from about Nov. 9.

-- 
You are receiving this mail because:
You are the assignee for the bug.