NetBSD Problem Report #51218

From tls@panix.com  Sun Jun  5 22:46:10 2016
Return-Path: <tls@panix.com>
Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(Client CN "mail.netbsd.org", Issuer "Postmaster NetBSD.org" (verified OK))
	by mollari.NetBSD.org (Postfix) with ESMTPS id 9EAC67AA9E
	for <gnats-bugs@gnats.NetBSD.org>; Sun,  5 Jun 2016 22:46:10 +0000 (UTC)
Message-Id: <20160605224608.DAA94242AA@panix5.panix.com>
Date: Sun,  5 Jun 2016 18:46:08 -0400 (EDT)
From: tls@NetBSD.ORG
Reply-To: tls@NetBSD.ORG
To: gnats-bugs@NetBSD.org
Subject: Memory corruption or use of uninitialized RNG on evbmips-mips64eb
X-Send-Pr-Version: 3.95

>Number:         51218
>Category:       port-evbmips
>Synopsis:       It appears cprng_strong's called on this platform before it is initialized, or possibly after memory corruption has screwed up its state.
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    port-evbmips-maintainer
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Jun 05 22:50:00 +0000 2016
>Last-Modified:  Mon Oct 31 02:50:00 +0000 2016
>Originator:     tls@NetBSD.ORG
>Release:        NetBSD 7.99.30
>Organization:
	The NetBSD Foundation, Inc.
>Environment:


System: NetBSD 7.99.30 NetBSD 7.99.30 (ERLITE.201606051010Z) evbmips
Architecture: mips64eb
Machine: evbmips
>Description:
	The "kernel" cprng -- which is a NIST CTR_DRBG instance whose output
	should pass the statistical tests no matter how it's keyed -- fails
	the tests at each boot on erlite.  This is usually indicative either
	of memory corruption, or use of the RNG before it's initialized.
>How-To-Repeat:
	Boot the ERLITE kernel.  Observe:

	init: copying out path `/sbin/init' 11
	pid 1(init): ABI set to N32 (e_flags=0x20000027)
	Kernel RNG "kernel" monobit test FAILURE: 10286 ones
	cprng kernel: failed statistical RNG test
	Kernel RNG "kernel" long run test FAILURE: Run of 26 0s found
	cprng kernel: failed statistical RNG test
>Fix:
	Unknown

>Audit-Trail:
From: coypu@SDF.ORG
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: port-evbmips/51218: It appears cprng_strong's called on this
 platform before it is initialized, or possibly after memory corruption has
 screwed up its state.
Date: Mon, 31 Oct 2016 02:47:03 +0000

 I only see this under load. idle, it is quiet.

>Unformatted:

Home	PR Database Search