[Bug 265852] qat: kernel crash using krb5p with nfs
- In reply to: bugzilla-noreply_a_freebsd.org: "[Bug 265852] qat: kernel crash using krb5p with nfs"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Mon, 15 Aug 2022 18:59:48 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=265852
Mark Johnston <markj@FreeBSD.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |markj@FreeBSD.org,
| |mav@FreeBSD.org
Status|New |Open
--- Comment #1 from Mark Johnston <markj@FreeBSD.org> ---
I believe this is a bug in kgssapi code. aes_checksum() and aes_encrypt_1()
can observe that CRYPTO_F_DONE is set before the callback worker thread has had
a chance to invoke the callback. Then the code frees the request, i.e., there
is a use-after-free.
kgssapi is ok with synchronous implementations of crypto routines, but not with
async implementations like QAT. So the workaround for now is simply to not use
QAT. I can provide a patch for testing, but I can't provide a truenas build.
--
You are receiving this mail because:
You are the assignee for the bug.