[Nouveau] [Bug 103689] there is an exploitable page fault that can be reliably triggered from the chromium sandbox can possibly lead to remote attackers causing a denial of service condition or possibly running system code.

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=103689

--- Comment #1 from Pierre Moreau <pierre.morrow at free.fr> ---
Which kernel version does your Ubuntu installation have? And with which GPU was
it?

I tried opening that page on my computer with Chromium, but it didn’t trigger a
page fault. This is what I got instead:

    [Nov12 12:40] nouveau 0000:04:00.0: Xorg[394]: fail ttm_validate
    [  +0.000006] nouveau 0000:04:00.0: Xorg[394]: validating bo list
    [  +0.000006] nouveau 0000:04:00.0: Xorg[394]: validate: -12
    [  +1.124277] nouveau 0000:04:00.0: gr: TRAP ch 10 [007fa04000 Xorg[394]]
    [  +0.000014] nouveau 0000:04:00.0: gr: SHADER a244020e, sph: 0x44020e,
stage: 0x22
    [  +5.515843] nouveau 0000:04:00.0: gr: TRAP ch 10 [007fa04000 Xorg[394]]
    [  +0.000016] nouveau 0000:04:00.0: gr: SHADER a244020e, sph: 0x44020e,
stage: 0x22
    [Nov12 12:41] nouveau 0000:04:00.0: Xorg[394]: fail ttm_validate
    [  +0.000005] nouveau 0000:04:00.0: Xorg[394]: validating bo list
    [  +0.000005] nouveau 0000:04:00.0: Xorg[394]: validate: -12
    [Nov12 12:42] nouveau 0000:04:00.0: gr: TRAP ch 10 [007fa04000 Xorg[394]]
    [  +0.000010] nouveau 0000:04:00.0: gr: SHADER a244020e, sph: 0x44020e,
stage: 0x22
    [Nov12 12:43] nouveau 0000:04:00.0: gr: TRAP ch 10 [007fa04000 Xorg[394]]
    [  +0.000009] nouveau 0000:04:00.0: gr: SHADER a244020e, sph: 0x44020e,
stage: 0x22
    [  +1.273289] nouveau 0000:04:00.0: gr: TRAP ch 10 [007fa04000 Xorg[394]]
    [  +0.000015] nouveau 0000:04:00.0: gr: SHADER a244020e, sph: 0x44020e,
stage: 0x22
    [  +0.455464] nouveau 0000:04:00.0: gr: TRAP ch 10 [007fa04000 Xorg[394]]
    [  +0.000013] nouveau 0000:04:00.0: gr: SHADER a244020e, sph: 0x44020e,
stage: 0x22
    [  +0.518625] nouveau 0000:04:00.0: gr: TRAP ch 10 [007fa04000 Xorg[394]]
    [  +0.000014] nouveau 0000:04:00.0: gr: SHADER a244020e, sph: 0x44020e,
stage: 0x22

GPU: GM206
Kernel: 4.13.12
Xorg: 1.19.5

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/nouveau/attachments/20171112/18f0b670/attachment.html>