[Bug 265852] qat: kernel crash using krb5p with nfs

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 15 Aug 2022 18:59:48 UTC

Mark Johnston <markj@FreeBSD.org> changed:

           What    |Removed                     |Added
                 CC|                            |markj@FreeBSD.org,
                   |                            |mav@FreeBSD.org
             Status|New                         |Open

--- Comment #1 from Mark Johnston <markj@FreeBSD.org> ---
I believe this is a bug in kgssapi code.  aes_checksum() and aes_encrypt_1()
can observe that CRYPTO_F_DONE is set before the callback worker thread has had
a chance to invoke the callback.  Then the code frees the request, i.e., there
is a use-after-free.

kgssapi is ok with synchronous implementations of crypto routines, but not with
async implementations like QAT.  So the workaround for now is simply to not use
QAT.  I can provide a patch for testing, but I can't provide a truenas build.

You are receiving this mail because:
You are the assignee for the bug.