Kernel panic in ifs_initialize_globals() or init_file_state() of the third-party module safenetfs

Issue

• Kernel panic in ifs_initialize_globals() or init_file_state() function of proprietary (P) kernel module [safenetfs].

• RHEL6 system crashed due to a NULL pointer dereference in the ifs_initialize_globals() function with the following call traces.

BUG: unable to handle kernel NULL pointer dereference at 0000000000000108
IP: [<ffffffffa01a8097>] ifs_initialize_globals+0x2107/0x2370 [safenetfs]
PGD 1353cf067 PUD 1353ce067 PMD 0 
Oops: 0000 [#1] SMP 
last sysfs file: /sys/devices/pci0000:00/0000:00:16.0/0000:0b:00.0/local_cpus
CPU 0 
Modules linked in: twnotify(U) safenetfs(P)(U) ...
Pid: 2387, comm: tesvc Tainted: P  ---------------  2.6.32-358.11.1.el6.x86_64 #1 
VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform
RIP: 0010:[<ffffffffa01a8097>]  [<ffffffffa01a8097>] ifs_initialize_globals+0x2107/0x2370 [safenetfs]
RSP: 0018:ffff880139c63d98  EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffff8800609584c0 RCX: 000000000000000c
RDX: ffffffffa01c1055 RSI: ffff880139c63ef8 RDI: ffff8801386e0d50
RBP: ffff880139c63e58 R08: ffffffffa01c1756 R09: ffffffffa01c90c0
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801386e0d50
R13: ffff88013a49e980 R14: ffff880107277540 R15: ffff880139c63ef8
FS:  00007f326b5fe700(0000) GS:ffff880028200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000108 CR3: 00000001353d0000 CR4: 00000000000007f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process tesvc (pid: 2387, threadinfo ffff880139c62000, task ffff880139ca8080)
Stack:
 ffff880139c63e38 ffffffff812256fb 0000000000000000 ffff880100000000
<d> ffff88013cfd8780 ffff880107277540 0000000000000000 0000000000000000
<d> 0000000000000000 0000000000000000 0000000000000000 0000000000000000
Call Trace:
 [<ffffffff812256fb>] ? dentry_has_perm+0x5b/0x80
 [<ffffffff81186a91>] vfs_getattr+0x51/0x80
 [<ffffffff81186b20>] vfs_fstatat+0x60/0x80
 [<ffffffff81186c6b>] vfs_stat+0x1b/0x20
 [<ffffffff81186c94>] sys_newstat+0x24/0x50
 [<ffffffff8100b072>] system_call_fastpath+0x16/0x1b
Code: 00 00 bf 01 00 00 00 48 c7 c1 14 58 1c a0 48 c7 c2 55 10 1c a0 31 c0 e8 18 af ff ff 4c 89 fe 4c 89 e7 e8 bd d2 fd e0 49 8b 45 10 <48> 8b 90 08 01 00 00 b8 42 4d 53 ff 48 39 42 60 0f 84 33 01 00 
RIP  [<ffffffffa01a8097>] ifs_initialize_globals+0x2107/0x2370 [safenetfs]
 RSP <ffff880139c63d98>
CR2: 0000000000000108

• RHEL7 system crashed due to a NULL pointer dereference in the init_file_state() function with the following call traces.

BUG: unable to handle kernel NULL pointer dereference at 0000000000000073
IP: [<ffffffffc077fe8c>] init_file_state+0x34c/0x5b0 [safenetfs]
PGD 80000003ffb85067 PUD 346a26067 PMD 0
Oops: 0000 [#1] SMP
Modules linked in: safenet_crypt_aesni(PFOE) safenetfs(FOE)... 
CPU: 1 PID: 34959 Comm: bpbkar Kdump: loaded Tainted: PFOE  ------------  3.10.0-957.21.3.el7.x86_64 #1
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 04/05/2016
task: ffffa131ccaf9040 ti: ffffa1319b780000 task.ti: ffffa1319b780000
RIP: 0010:[<ffffffffc077fe8c>]  [<ffffffffc077fe8c>] init_file_state+0x34c/0x5b0 [safenetfs]
RSP: 0018:ffffa1319b783c80  EFLAGS: 00010296
RAX: 0000000000000000 RBX: ffffa1306b517800 RCX: ffffffffc079c46f
RDX: ffffffffc079a500 RSI: 0000000000000003 RDI: 0000000000000001
RBP: ffffa1319b783cb8 R08: ffffffffc079a500 R09: ffffffffc079e5d8
R10: 00000000069345f8 R11: ffffa12fecabb5c0 R12: ffffa131ed0a1b00
R13: ffffa130f5328010 R14: ffffa12fecabb5c0 R15: fffffffffffffffb
FS:  00007f6abcd7d780(0000) GS:ffffa131ee640000(0000) knlGS:0000000000000000
[CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000073 CR3: 00000003e8ea8000 CR4: 00000000000607e0
Call Trace:
[<ffffffff93a4c703>] lookup_real+0x23/0x60
[<ffffffff93a4d122>] __lookup_hash+0x42/0x60
[7[<ffffffff93f5fda1>] lookup_slow+0x42/0xa7
[[<ffffffff93a523f8>] path_lookupat+0x838/0x8b0
[<ffffffff9393278d>] ? audit_copy_inode+0x6d/0xb0
[<ffffffff93a4c687>] ? path_get+0x27/0x30
[<ffffffff93a5249b>] filename_lookup+0x2b/0xc0
[<ffffffff93a54487>] user_path_at_empty+0x67/0xc0
[<ffffffff93a544f1>] user_path_at+0x11/0x20
[<ffffffff93a6a8ea>] SyS_getxattr+0x4a/0xc0
[<ffffffff93f75ddb>] system_call_fastpath+0x22/0x27
[<ffffffff93f75d21>] ? system_call_after_swapgs+0xae/0x146
Code: ab 01 00 00 31 c0 48 c7 c1 68 f2 79 c0 48 c7 c2 80 a6 79 c0 be 03 00 00 00 bf 01 00 00 00 e8 7c 9a ff ff 4c 89 ff e8 c4 a1 ff ff <49> 8b 47 78 f6 40 20 01 0f 85 26 01 00 00 bf 01 00 00 00 48 c7
RIP  [<ffffffffc077fe8c>] init_file_state+0x34c/0x5b0 [safenetfs]
 RSP <ffffa1319b783c80>
CR2: 0000000000000073