BUGDB

Research: Bugs found in Kernel Linux (http://vbdb.itu.dk) and GNU C Compiler (GCC)
Tools: Git, Bugzilla and Tig
Bugs description (borders): Yellow (first commit); green (bugfix commit); blue (original code); red (bug).

Kernel Linux

buffer overflow

Insufficient buffer length leads to buffer overflow

\

wmi: fix kernel panic when stack protection enabled

Wrong length units lead to buffer overflow and cause kernel panic

fs/proc/task_mmu.c: fix buffer overflow in add_page_map()

Failing to preserve invariant causes buffer overflow

kobject: fix oops with "input0: bad kobj_uevent_env content in show_uevent()"

dead code

Do_sect_fault defined but not used if ARM_LPAE is enabled

ARM: 7775/1: mm: Remove do_sect_fault from LPAE code

double acquiring lock

Double lock when debugging diskquota

quota: Fix double lock in add_dquot_ref() with CONFIG_QUOTA_DEBUG

assertion violation

Attempt to call a VLAN-related function with VLAN support disabled

RDMA/ocrdma: Don't call vlan_dev_real_dev() for non-VLAN netdevs

Assertion violation when walking through system memory

parisc: fix kernel BUG at arch/parisc/include/asm/mmzone.h:50

Function pointer left uninitialized when power management is disabled

ARM: OMAP: sram: fix BUG in dpll code for !PM case

Unexpected decrement of the preemption counter

tcp: fix CONFIG_TCP_MD5SIG + CONFIG_PREEMPT timer BUG()

Fail to process a VLAN packet without VLAN support

vlan: Calling vlan_hwaccel_do_receive() is always valid.

incompatible types

Argument type incompatible with `printk' format string

drivers/block/z2ram.c: correct printing of sector_t

Mockup implementation expects incompatible pointer type

regulator: max8660: fix build warnings

IndexOutOfBounds

Memory access beyond buffer limits

[S390] prng: prevent access beyond end of stack

fail to release memory before removing last reference to it

Pointer is set to NULL without freeing previously allocated memory

[IPV4]: Fix memory leak in inet_hashtables.h when NUMA is on

cannot allocate memory because there is not enough available

Module loading fails due to attempt to double-register compat class

extcon: Unregister compat class at module unload to fix oops

Network interface will fail to go up when !ZONE_DMA

net: ep93xx_eth: drop GFP_DMA from call to dma_alloc_coherent()

null pointer dereference

NULL pointer on !OF_IRQ gets dereferenced if IRQ_DOMAIN

ARM: omap: fix broken twl-core dependencies and ifdefs

NULL function pointer dereferenced if SHMEM is enabled but not TMPFS

drm/i915: Add dependency on CONFIG_TMPFS

Debugging code may derefence a NULL pointer

sctp: fix CONFIG_SCTP_DBG_MSG=y null pointer dereference in sctp_v6_get_dst()

NULL pointer deference due to invalid cast in x86 NUMA

x86/PCI: make 32 bit NUMA node array int, not unsigned char

numeric truncation

Truncation error when converting unsigned long long to long

hrtimer: Fix ktime_add_ns() overflow on 32bit architectures

read out of the intended bounds

Function incorrectly returning (int)255 on failure causes kernel panic

http://vbdb.itu.dk/#bug/91ea820
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/arch/parisc/mm/init.c?id=02706647a49011ae1e7b4eca33e835d1681b094e
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/arch/parisc/mm/init.c?id=8039de10aae3cd4cf0ef0ccebd58aff0e8810df2
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/arch/parisc/mm/init.c?id=8039de10aae3cd4cf0ef0ccebd58aff0e8810df2
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/arch/parisc/mm/init.c?id=91ea8207168793b365322be3c90a4ee9e8b03ed4

Array is accessed out of its bounds in some configurations

http://vbdb.itu.dk/#bug/0f8f809
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/mm/slab.c?h=linux-3.10.y&id=254844d3b9959b52fedf2f22810cc66e82a1ca16
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/mm/slab.c?h=linux-3.10.y&id=292088ee032d0df59e7c8a7a00e9b97260146078
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/diff/mm/slab.c?h=linux-3.10.y&id=292088ee032d0df59e7c8a7a00e9b97260146078&id2=254844d3b9959b52fedf2f22810cc66e82a1ca16
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/mm/slab.c?id=0f8f8094d28eb53368ac09186ea6b3a324cc7d44

SysFS API violation

Kernel panic due to double enable_IR_x2apic() call on non-SMP boards

http://vbdb.itu.dk/#bug/472a474
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/arch/x86/kernel/apic.c?h=linux-2.6.29.y
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/arch/x86/kernel/apic/apic.c?h=linux-2.6.30.y
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/arch/x86/kernel/apic/apic.c?h=linux-2.6.32.y

undeclared identifier

Undefined reference to macro when !BLK_CGROUP

http://vbdb.itu.dk/#bug/f48ec1d
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/block/blk-cgroup.h?id=8a3d26151f24e2a2ffa550890144c3d54d2edb15
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/block/blk-cgroup.h?id=3381cb8d2ef1523dbaeec99161d766c25f1e52d6
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/block/blk-cgroup.h?id=f48ec1d7885281a9c6cd7779d61f321d1b1fd741

undefined symbol reference

Build error due to missing dependency of BCM47XXX on EXTIF

http://vbdb.itu.dk/#bug/2f02c15
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/arch/mips/Kconfig?id=ea202c632a52c4a83f1bd82d8d06bc8e04f2689a
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/arch/mips/Kconfig?id=1c0c13eb935c95fd2ca0b0aca6dd4860487fb242 [http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/arch/mips/Kconfig?id=940f6b48a130e0a33cb8bd397dd0e277166470ad]
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/diff/arch/mips/Kconfig?id=1c0c13eb935c95fd2ca0b0aca6dd4860487fb242
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/arch/mips/Kconfig?id=2f02c15a5d963007bd721d76f644c9491f6fec06

Undefined reference to cryptographic function

http://vbdb.itu.dk/#bug/242f1a3

http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/crypto/Kconfig?id=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 [http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/crypto/Kconfig?id=d1cda4e39638e906f022c8ce56f566b617e1f77e]
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/crypto/Kconfig?id=242f1a343776a621ad5c3446d6f2718d37863cb5

Selecting ACPI_VIDEO but not its dependencies causes a build error

http://vbdb.itu.dk/#bug/7c6048b
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/drivers/gpu/stub/Kconfig?id=e26fd1199ebab0d469fc3e037da5932d382f0669
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/drivers/gpu/stub/Kconfig?id=7c6048b7c83690ce59e65922fb2875479a22300e

Undefined references to OMAP2420 functions

http://vbdb.itu.dk/#bug/6515e48
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/arch/arm/mach-omap2/Kconfig?id=d10f2b6e745f1232ff6517b335faf3bfd7005bec ou http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/arch/arm/mach-omap2/Kconfig?id=1dbae815a724303b46ab4663b5fc23c13e9d9690
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/arch/arm/mach-omap2/Kconfig?id=088ef950dc0dd58d2f339e1616c9092fea923f06
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/diff/arch/arm/mach-omap2/Kconfig?id=088ef950dc0dd58d2f339e1616c9092fea923f06
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/arch/arm/mach-omap2/Kconfig?id=6515e48932c8bf04227f9dd638c8ac634f89ba24

Undefined reference due to missing dependency on I2C

http://vbdb.itu.dk/#bug/6651791
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/sound/soc/sh/Kconfig?id=98615454f66175e923f239ab1d1bd85cd618363e
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/sound/soc/sh/Kconfig?id=038494059f795849012a96adba2ab73e65b94ba5
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/diff/sound/soc/sh/Kconfig?id=038494059f795849012a96adba2ab73e65b94ba5
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=66517915e0954ee027b889f452511945f7a9f3ec

use of variable before initialization

Use of variable before initialization when !SECURITY

http://vbdb.itu.dk/#bug/30e0532
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/diff/include/linux/security.h?id=1e39f384bb01b0395b69cb70c2cacae65012f203
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/include/linux/security.h?id=7d8db1808a2001077a9f966180c5e4f7cc20d4c7
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/include/linux/security.h?id=30e053248da178cf6154bb7e950dc8713567e3fa

An uninitialized string may be displayed if !CONFIG_RCU_FAST_NO_HZ.

http://vbdb.itu.dk/#bug/1c17e4d
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/diff/kernel/rcutree_plugin.h?id=a858af2875fb291d0f4b0a4419fefbf03c2379c0
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/kernel/rcutree_plugin.h?id=27565d64a4e564e72c22d8c91a3cfcb9442383e8
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/kernel/rcutree_plugin.h?id=1c17e4d4437d8045a596d9f06c1558dc09e2b372

Dereferencing uninitialized pointer causes Kernel crash

http://vbdb.itu.dk/#bug/7acf6cd
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/drivers/tty/pty.c?id=fa2ecfc5a68d85624bbd84f7d010860776b7e602
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/drivers/tty/pty.c?id=1dcb8e6d1c23f2e021639199fdf64d5b42689207
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=7acf6cd80b201f77371a5374a786144153629be8

Non-initialized buffer causes kernel panic in JFFS2

http://vbdb.itu.dk/#bug/bc8cec0
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/diff/fs/jffs2/wbuf.c?id=b3ce1debe2685383a9ad6ace9c49869c3968c013
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/fs/jffs2/wbuf.c?id=f99d49adf527fa6f7a9c42257fa76bca6b8df1e3
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/fs/jffs2/wbuf.c?id=bc8cec0dff072f1a45ce7f6b2c5234bb3411ac51

Netpoll_setup() returns an uninitialized value (error code)

unused variable

Unused variable when BF60x is enabled

http://vbdb.itu.dk/#bug/36855dc
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/diff/arch/blackfin/mach-common/pm.c?id=1efc80b53eb54770139219f99657abd92595fc86
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/arch/blackfin/mach-common/pm.c?id=cfefe3c683e0d14c9ce3aeb883c55c7f30c20183
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/arch/blackfin/mach-common/pm.c?id=36855dcfc980f247909b8f63776664c6ccb6f183

attempt to use a resource after having freed it

Module_core is referenced after being freed during error cleanup

http://vbdb.itu.dk/#bug/6e2b757
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/diff/kernel/module.c?id=720eba31f47aeade8ec130ca7f4353223c49170f
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/kernel/module.c?id=17da2bd90abf428523de0fb98f7075e00e3ed42e
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/kernel/module.c?id=6e2b75740bed35df98b8113300579e13ed2ce848

warning: dereferencing `void *' pointer

Disabling PCI support implies that a void* pointer will be dereferenced

http://vbdb.itu.dk/#bug/d530db0
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/drivers/net/3c59x.c?id=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2]
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/drivers/net/3c59x.c?id=d530db0db90378b5674cb78d9c0cfcc83f851a5e

assertion violation

Warning due to a call to kmalloc() with flags __GFP_WAIT and interrupts enabled

http://vbdb.itu.dk/#bug/eb91f1d
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/diff/mm/slab.c?id=e498be7dafd72fd68848c1eef1575aa7c5d658df
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/mm/slab.c?id=dd3927105b6f65afb7dac17682172cdfb86d3f00
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/mm/slab.c?id=eb91f1d0a531289e18f5587dc197d12a251c66a3

Local_bh_enable() is called with interrupts disabled when HIGHMEM

http://vbdb.itu.dk/#bug/208d898
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/net/ipv4/udp.c?id=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2]
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/net/ipv4/udp.c?id=208d89843b7b03978d8e748b8b991c1be81c4f43

attempt to write on read-only resource

Attempt to set a breakpoint resulted in kernel panic

http://vbdb.itu.dk/#bug/221ac32
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/include/asm-powerpc/pgtable-ppc32.h?id=f88df14b1f15cdeffa060580a40c1ce3e13bb79e]
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/include/asm-powerpc/pgtable-ppc32.h? id=221ac329e93fe2a676346af2e98e311251648f69

wrong number of arguments in function application

Null stub missing parameter when !TRACING

http://vbdb.itu.dk/#bug/e67bc51
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/diff/include/linux/kernel.h?id=c142be8ebe0b7bf73c8a0063925623f3e4b980c0
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/include/linux/kernel.h?id=9d3c752c062e3266f1051ba0825276ea1e2777da
http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/tree/include/linux/kernel.h?id=e67bc51e574ffe3c4bc1e09cab7658b1e780b4ce

GCC

Bug 33136 - [4.2 Regression] wrong code due to alias with allocation in loop

[PATCH] Disable -fipa-type-escape (PR tree-optimization/33136)

Bug 43936 - [4.6 regression] Revision 158896 fails to bootstrap

PATCH: PR bootstrap/43935: [4.6 regression] Revision 158896 fails to bootstrap

Bug 59575 - [4.9 regression] ICE in maybe_record_trace_start, at dwarf2cfi.c:2239

[PATCH] Fix ARM dwarf2cfi ICE and unwind info issues (PR target/59575)

Bug 15266 - libgfortran doesn't compile on IRIX 5.3

4.0.2/4.1 PATCH: Allow libgfortran compilation on IRIX 5/6 (PR libfortran/15266)

Bug 37378 - [4.4 Regression] Revision 139827 causes Divide_X

[PATCH] EH_USES df fix (PR target/37378)

Bug 22134 - [4.1 Regression] vf_hue.c:54: internal compiler error: in final_scan_insn, at final.c:2419

[PATCH, i386]: Fix target/22134

Bug 42420 - libgfortran fails to open large files on MINGW32

[Patch, libfortran] PR 42420 Large file capable stat for MingW

Bug 51296 - Several 30_threads tests FAIL on Tru64 UNIX

Re: Gthreads patch to disable static initializer macros

Bug 54290 - [4.6 regression] wrong code at -O2 with large offset

[patch] Fix PR rtl-optimization/54290

Bug 45296 - register long double ICE at -O2, -Os, -O3

[PATCH]: Fix PR45296, register long double ICE at -O2, -Os, -O3

Bug 36246 - Reload chooses too wide mode for reg->mem->xmmreg reload

[PATCH, i386]: Fix PR target/36246

Bug 41465 - bootstrap failed - ../libdecnumber/gstdint.h:80: error: two or more data types in declaration specifiers

PATCH: Avoid conflict between GCC_STDINT_TYPES and GCC_HEADER_STDINT

Bug 24444 - [4.1/4.2 regression] invalid register in debug info

Fix PR debug/24444: incorrect frame base in IA64 prologues

Bug 49347 - G++ rejects Solaris spawn.h use of __restrict

[fixincludes] Fix posix_spawn* declarations in Solaris (PR c++/49347)

Bug 49325 - Incorrect target HAVE_INITFINI_ARRAY check

PATCH: PR other/49325: Incorrect target HAVE_INITFINI_ARRAY check