Package: rng-tools
Version: 2-unofficial-mt.13-3
Severity: important

According to a commit in LKML:

    It has been reported that on at least one Nano CPU the xstore               
                                                                            
    instruction will write as many as 16 bytes of data to the output            
                                                                            
    buffer.                                                                     
                                                                            
                                                                                
                                                                            
    This causes memory corruption as we use rng->priv which is only             
                                                                            
    4-8 bytes long.                                                             
                                                                            
                                                                                
                                                                            
    This patch fixes this by using an intermediate buffer on the stack          
                                                                            
    with at least 16 bytes and aligned to a 16-byte boundary.                   
                                                                            
                                                                                
                                                                            
    The problem was observed on the following processor:                        
                                                                            
                                                                                
                                                                            
    processor   : 0                                                             
                                                                            
    vendor_id   : CentaurHauls                                                  
                                                                            
    cpu family  : 6                                                             
                                                                            
    model               : 15                                                    
                                                                            
    model name  : VIA Nano processor U2250 (1.6GHz Capable)                     
                                                                            
    stepping    : 3                                                             
                                                                            
    cpu MHz             : 1600.000                                              
                                                                            
    cache size  : 1024 KB                                                       
                                                                            
    fdiv_bug    : no                                                            
                                                                            
    hlt_bug             : no                                                    
                                                                            
    f00f_bug    : no                                                            
                                                                            
    coma_bug    : no                                                            
                                                                            
    fpu         : yes                                                           
                                                                            
    fpu_exception       : yes                                                   
                                                                            
    cpuid level : 10                                                            
                                                                            
    wp          : yes
coma_bug    : no                                                                
                                                                        
    fpu         : yes                                                           
                                                                            
    fpu_exception       : yes                                                   
                                                                            
    cpuid level : 10                                                            
                                                                            
    wp          : yes                                                           
                                                                            
    flags               : fpu vme de pse tsc msr pae mce cx8 apic sep
mtrr pge mca cmov pat clflush acpi mmx fxsr sse sse2 ss tm syscall nx lm
constant_tsc 
+up rep_good pni monitor vmx est tm2 ssse3 cx16 xtpr rng rng_en ace
ace_en ace2 phe phe_en lahf_lm                                                  
        
    bogomips    : 3192.08                                                       
                                                                            
    clflush size        : 64                                                    
                                                                            
    cache_alignment     : 128                                                   
                                                                            
    address sizes       : 36 bits physical, 48 bits virtual                     
                                                                            
    power management:                                                           
                                                                            
                                                                                
                                                                            
    Tested-by: Mario 'BitKoenig' Holbe <mario.ho...@tu-ilmenau.de>              
                                                                            
    Signed-off-by: Herbert Xu <herb...@gondor.apana.org.au>                     
                                                                            


We need to do the same: use a static buffer 16-byte aligned, at least
16-bytes wide (better make it 128 bytes if VIA is going to have
extremely dangerous CPU bugs like this...)

-- System Information:
Debian Release: 6.0
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32.27 (SMP w/8 CPU cores)
Locale: LANG=pt_BR.UTF-8, LC_CTYPE=pt_BR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages rng-tools depends on:
ii  libc6                         2.11.2-7   Embedded GNU C Library: Shared lib
ii  makedev                       2.3.1-89   creates device files in /dev
ii  udev                          164-3      /dev/ and hotplug management daemo

rng-tools recommends no packages.

rng-tools suggests no packages.

-- Configuration Files:
/etc/init.d/rng-tools changed [not included]
/etc/logcheck/ignore.d.server/rng-tools [Errno 13] Permission denied: 
u'/etc/logcheck/ignore.d.server/rng-tools'
/etc/logcheck/violations.ignore.d/rng-tools [Errno 13] Permission denied: 
u'/etc/logcheck/violations.ignore.d/rng-tools'

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to