ulli-kroll / rtl8188fu

rtl8188fu driver for linux / rtlwifi prepare
GNU General Public License v2.0
62 stars 292 forks source link

UBSAN: shift-out-of-bounds.... shift exponent 131072 is too large for 32-bit type 'int' #23

Open gsustek opened 1 year ago

gsustek commented 1 year ago

on ubuntu 22.04, dkms install , kernel 5.15.64

Wed Jan 4 14:46:55 2023] ================================================================================ [Wed Jan 4 14:46:55 2023] UBSAN: shift-out-of-bounds in /var/lib/dkms/rtl8188fu/5.15/build/os_dep/linux/ioctl_cfg80211.c:5738:19 [Wed Jan 4 14:46:55 2023] shift exponent 131072 is too large for 32-bit type 'int' [Wed Jan 4 14:46:55 2023] CPU: 4 PID: 5280 Comm: hostapd Tainted: G OE 5.15.0-56-generic #62-Ubuntu [Wed Jan 4 14:46:55 2023] Hardware name: Default string Default string/Default string, BIOS 5.13 06/17/2020 [Wed Jan 4 14:46:55 2023] Call Trace: [Wed Jan 4 14:46:55 2023] [Wed Jan 4 14:46:55 2023] show_stack+0x52/0x5c [Wed Jan 4 14:46:55 2023] dump_stack_lvl+0x4a/0x63 [Wed Jan 4 14:46:55 2023] dump_stack+0x10/0x16 [Wed Jan 4 14:46:55 2023] ubsan_epilogue+0x9/0x49 [Wed Jan 4 14:46:55 2023] ubsan_handle_shift_out_of_bounds.cold+0x61/0xef [Wed Jan 4 14:46:55 2023] ? mutex_unlock+0x25/0x30 [Wed Jan 4 14:46:55 2023] cfg80211_rtw_mgmt_frame_register+0x2b/0x31 [rtl8188fu] [Wed Jan 4 14:46:55 2023] cfg80211_mgmt_registrations_update+0x142/0x200 [cfg80211] [Wed Jan 4 14:46:55 2023] cfg80211_mlme_register_mgmt+0x179/0x2d0 [cfg80211] [Wed Jan 4 14:46:55 2023] nl80211_register_mgmt+0x97/0xe0 [cfg80211] [Wed Jan 4 14:46:55 2023] genl_family_rcv_msg_doit+0xe4/0x150 [Wed Jan 4 14:46:55 2023] genl_rcv_msg+0xe2/0x1f0 [Wed Jan 4 14:46:55 2023] ? nl80211_leave_mesh+0x20/0x20 [cfg80211] [Wed Jan 4 14:46:55 2023] ? genl_get_cmd+0xe0/0xe0 [Wed Jan 4 14:46:55 2023] netlink_rcv_skb+0x53/0x100 [Wed Jan 4 14:46:55 2023] genl_rcv+0x29/0x40 [Wed Jan 4 14:46:55 2023] netlink_unicast+0x220/0x340 [Wed Jan 4 14:46:55 2023] netlink_sendmsg+0x24b/0x4c0 [Wed Jan 4 14:46:55 2023] sock_sendmsg+0x66/0x70 [Wed Jan 4 14:46:55 2023] __sys_sendmsg+0x252/0x290 [Wed Jan 4 14:46:55 2023] ? import_iovec+0x31/0x40 [Wed Jan 4 14:46:55 2023] ? sendmsg_copy_msghdr+0x7f/0xa0 [Wed Jan 4 14:46:55 2023] _sys_sendmsg+0x81/0xc0 [Wed Jan 4 14:46:55 2023] ? do_read_fault+0xd9/0x160 [Wed Jan 4 14:46:55 2023] ? cond_resched+0x1a/0x50 [Wed Jan 4 14:46:55 2023] ? aa_sk_perm+0x43/0x1c0 [Wed Jan 4 14:46:55 2023] ? _copy_from_user+0x2e/0x70 [Wed Jan 4 14:46:55 2023] ? audit_syscall_exit+0x269/0x2d0 [Wed Jan 4 14:46:55 2023] sys_sendmsg+0x62/0xc0 [Wed Jan 4 14:46:55 2023] __x64_sys_sendmsg+0x1d/0x30 [Wed Jan 4 14:46:55 2023] do_syscall_64+0x59/0xc0 [Wed Jan 4 14:46:55 2023] ? syscall_exit_to_user_mode+0x27/0x50 [Wed Jan 4 14:46:55 2023] ? do_syscall_64+0x69/0xc0 [Wed Jan 4 14:46:55 2023] ? irqentry_exit+0x1d/0x30 [Wed Jan 4 14:46:55 2023] ? exc_page_fault+0x89/0x170 [Wed Jan 4 14:46:55 2023] entry_SYSCALL_64_after_hwframe+0x61/0xcb [Wed Jan 4 14:46:55 2023] RIP: 0033:0x7f936fa6eb17 [Wed Jan 4 14:46:55 2023] Code: 0f 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [Wed Jan 4 14:46:55 2023] RSP: 002b:00007ffca4142bf8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [Wed Jan 4 14:46:55 2023] RAX: ffffffffffffffda RBX: 000055f67b84e7f0 RCX: 00007f936fa6eb17 [Wed Jan 4 14:46:55 2023] RDX: 0000000000000000 RSI: 00007ffca4142c30 RDI: 0000000000000008 [Wed Jan 4 14:46:55 2023] RBP: 000055f67b849620 R08: 0000000000000004 R09: 000055f67b849780 [Wed Jan 4 14:46:55 2023] R10: 00007ffca4142d10 R11: 0000000000000246 R12: 000055f67b849ac0 [Wed Jan 4 14:46:55 2023] R13: 00007ffca4142c30 R14: 0000000000000000 R15: 0000000000000000 [Wed Jan 4 14:46:55 2023] [Wed Jan 4 14:46:55 2023] ================================================================================ [Wed Jan 4 14:46:55 2023] br-lan: port 7(wlx00e0232dea47) entered blocking state [Wed Jan 4 14:46:55 2023] br-lan: port 7(wlx00e0232dea47) entered disabled state [Wed Jan 4 14:46:55 2023] device wlx00e0232dea47 entered promiscuous mode [Wed Jan 4 14:46:56 2023] RTL871X: assoc success