Authentication Issues Led to Kernel Panic?

[doogie859]

I was in the midst of documenting here some unexpected/unexplained behavior and using an encrypted folder and Finder to help document steps taken when the OS X kernel crashed.

An AES-128 sparsebundle folder with ~ 65MB of PDFs is locked. I double-click the folder in Finder and I am presented with an empty Finder window and no Authentication dialog. Back-arrowing to the parent directory, then right-clicking the folder and choosing Open presents me with the Authentication dialog. Providing the correct password properly decrypts the folder and all is well. Able to return to Finder and choose Lock from the folder's contextual menu. Double-clicking the folder will again present me with a blank Finder window. Dragging a new file onto the empty Finder window will present the Authentication dialog.

The big question is, "why am I only able to decrypt by right-clicking the folder and choosing Open / why doesn't double-clicking work properly?" With a close second, "why did EspionageHelper cause the OS X kernel to take a nosedive?" And 'cause I just can't stop myself, "Can this sort of thing cause a loss in data integrity while working with encrypted folders?"

Output:
Sun Jul 26 19:18:38 2009
panic(cpu 0 caller 0x0019FEE7): "simple lock deadlock detection: lock=0x1265ede0, cpu=0, owning thread=0x6d8aa50"@/SourceCache/xnu/xnu-1228.12.14/osfmk/i386/locks_i386.c:317
Backtrace (CPU 0), Frame : Return Address (4 potential args on stack)
0x5b247980 : 0x12b4c6 (0x45ec20 0x5b2479b4 0x13355c 0x0)
0x5b2479d0 : 0x19fee7 (0x4671b8 0x1265ede0 0x0 0x6d8aa50)
0x5b2479f0 : 0x13180f (0x1265ede0 0x7570804 0x35 0x6eca744)
0x5b247a50 : 0x19d8b1 (0x6d87794 0x1265edc4 0x6d87794 0x202)
0x5b247a68 : 0xc6e807 (0x6d87794 0x5b247b08 0x4 0xc76a54)
0x5b247b28 : 0x35d9da (0x6a547f8 0x0 0x30 0x8c37664)
0x5b247b68 : 0x1da90b (0x6abf804 0x6a547f8 0x30 0x8c37664)
0x5b247bb8 : 0x1e859a (0xa0a4cb0 0xd8e9c70 0x30 0x8c37664)
0x5b247f78 : 0x3e2e3b (0x7247950 0x8c37560 0x8c375a4 0x4103)
0x5b247fc8 : 0x1a1bfa (0x7e24680 0x0 0x1a40b5 0x7e25520)
No mapping exists for frame pointer
Backtrace terminated-invalid frame pointer 0xb0226cd8
Kernel loadable modules in backtrace (with dependencies):
com.taoeffect.ispy.kext(1.0.8)@0xc6d000->0xc79fff

BSD process name corresponding to current thread: EspionageHelper

Mac OS version:
9J61

Kernel version:
Darwin Kernel Version 9.7.0: Tue Mar 31 22:52:17 PDT 2009; root:xnu-1228.12.14~1/RELEASE_I386
System model name: MacBook4,1 (Mac-F22788A9)

System uptime in nanoseconds: 15574766778705
unloaded kexts:
com.apple.driver.InternalModemSupport 2.4.0 - last unloaded 261336127452
loaded kexts:
com.parallels.kext.Pvsvnic 3.0
com.parallels.kext.vmmain 3.0
com.parallels.kext.hypervisor 3.0
com.taoeffect.ispy.kext 1.0.8
com.parallels.kext.Pvsnet 3.0
com.parallels.kext.ConnectUSB 3.0.0
com.apple.filesystems.afpfs 9.0.1 - last loaded 196293121803
com.apple.nke.asp_tcp 4.7.1
com.apple.driver.InternalModemSupport 2.4.0
com.apple.iokit.IOBluetoothSerialManager 2.1.6f8
com.apple.filesystems.autofs 2.0.2
com.apple.driver.AppleHDAPlatformDriver 1.6.8a3
com.apple.driver.AppleHWSensor 1.9d0
com.apple.driver.AppleHDA 1.6.8a3
com.apple.Dont_Steal_Mac_OS_X 6.0.3
com.apple.iokit.CHUDUtils 201
com.apple.driver.AppleUpstreamUserClient 2.7.5
com.apple.iokit.CHUDProf 211
com.apple.driver.AppleGraphicsControl 2.8.11
com.apple.driver.AppleHDAController 1.6.8a3
com.apple.driver.SMCMotionSensor 2.1.1d2
com.apple.driver.AppleIRController 110
com.apple.iokit.IOFireWireIP 1.7.7
com.apple.driver.AudioIPCDriver 1.0.6
com.apple.driver.AppleIntelGMAX3100 5.4.4
com.apple.driver.AppleIntelGMAX3100FB 5.4.4
com.apple.driver.ACPI_SMC_PlatformPlugin 3.4.0d10
com.apple.driver.AppleLPC 1.2.12
com.apple.driver.AppleBacklight 1.6.0
com.apple.driver.AppleTyMCEDriver 1.0.0d28
com.apple.driver.AppleUSBDisplays 2.0.2
com.apple.driver.AppleUSBTrackpad 1.7.4f1
com.apple.driver.AppleUSBTCKeyEventDriver 1.7.4f1
com.apple.driver.AppleUSBTCKeyboard 1.7.4f1
com.apple.driver.CSRUSBBluetoothHCIController 2.1.6f8
com.apple.driver.AppleUSBHIDMouse 1.2.3f1
com.apple.driver.AppleHIDKeyboard 1.0.8b1
com.apple.driver.CSRHIDTransitionDriver 2.1.6f8
com.apple.driver.USBCameraFirmwareLoader 1.0.9
com.apple.driver.AppleUSBMergeNub 3.4.3
com.apple.driver.XsanFilter 2.7.91
com.apple.iokit.IOSCSIMultimediaCommandsDevice 2.0.9
com.apple.iokit.SCSITaskUserClient 2.0.9
com.apple.driver.AppleFileSystemDriver 1.1.0
com.apple.iokit.IOATAPIProtocolTransport 1.5.2
com.apple.driver.AppleUSBHub 3.4.0
com.apple.iokit.IOUSBUserClient 3.3.1
com.apple.iokit.IOAHCIBlockStorage 1.2.1
com.apple.iokit.AppleYukon2 3.1.12b14
com.apple.driver.AppleUSBUHCI 3.3.5
com.apple.driver.AirPortBrcm43xx 363.35.0
com.apple.driver.AppleFWOHCI 3.8.2
com.apple.driver.AppleAHCIPort 1.6.0
com.apple.driver.AppleIntelPIIXATA 2.0.0
com.apple.driver.AppleUSBEHCI 3.4.3
com.apple.driver.AppleEFINVRAM 1.2.0
com.apple.driver.AppleSmartBatteryManager 158.10.0
com.apple.driver.AppleRTC 1.2.3
com.apple.driver.AppleHPET 1.4
com.apple.driver.AppleACPIPCI 1.2.4
com.apple.driver.AppleACPIButtons 1.2.4
com.apple.driver.AppleSMBIOS 1.4
com.apple.driver.AppleACPIEC 1.2.4
com.apple.driver.AppleAPIC 1.4
com.apple.security.seatbelt 107.12
com.apple.nke.applicationfirewall 1.6.77
com.apple.security.TMSafetyNet 3
com.apple.driver.AppleIntelCPUPowerManagement 76.0.0
com.apple.driver.DiskImages 199
com.apple.BootCache 30.4
com.apple.iokit.IOSerialFamily 9.4
com.apple.driver.DspFuncLib 1.6.8a3
com.apple.iokit.CHUDKernLib 201
com.apple.iokit.IOHDAFamily 1.6.8a3
com.apple.iokit.IOAudioFamily 1.6.9fc3
com.apple.kext.OSvKernDSPLib 1.1
com.apple.driver.IOPlatformPluginFamily 3.4.0d10
com.apple.driver.AppleSMC 2.2.1d2
com.apple.iokit.IONDRVSupport 1.7.3
com.apple.iokit.IOGraphicsFamily 1.7.3
com.apple.driver.AppleUSBBluetoothHCIController 2.1.6f8
com.apple.iokit.IOBluetoothFamily 2.1.6f8
com.apple.driver.AppleHIDMouse 1.2.3f1
com.apple.iokit.IOUSBHIDDriver 3.2.2
com.apple.driver.AppleUSBComposite 3.2.0
com.apple.iokit.IOSCSIBlockCommandsDevice 2.0.9
com.apple.iokit.IOBDStorageFamily 1.5
com.apple.iokit.IODVDStorageFamily 1.5
com.apple.iokit.IOCDStorageFamily 1.5
com.apple.iokit.IOSCSIArchitectureModelFamily 2.0.9
com.apple.iokit.IO80211Family 216.1
com.apple.iokit.IONetworkingFamily 1.6.1
com.apple.iokit.IOFireWireFamily 3.4.7
com.apple.iokit.IOAHCIFamily 1.5.0
com.apple.iokit.IOATAFamily 2.0.1
com.apple.iokit.IOUSBFamily 3.4.3
com.apple.driver.AppleEFIRuntime 1.2.0
com.apple.iokit.IOSMBusFamily 1.1
com.apple.iokit.IOStorageFamily 1.5.6
com.apple.iokit.IOHIDFamily 1.5.5
com.apple.driver.AppleACPIPlatform 1.2.4
com.apple.iokit.IOACPIFamily 1.2.0
com.apple.iokit.IOPCIFamily 2.6


System Info:
Model: MacBook4,1, BootROM MB41.00C1.B00, 2 processors, Intel Core 2 Duo, 2.4 GHz, 4 GB
Graphics: kHW_IntelGMA965Item, GMA X3100, spdisplays_builtin, 144 MB
Memory Module: global_name
AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0x88), Broadcom BCM43xx 1.0 (5.10.38.35)
Bluetooth: Version 2.1.6f8, 2 service, 0 devices, 1 incoming serial ports
Network Service: Ethernet, Ethernet, en0
Network Service: Parallels Host-Guest, Ethernet, en2
Network Service: Parallels NAT, Ethernet, en3
Serial ATA Device: Hitachi HTS542525K9SA00, 232.89 GB
Parallel ATA Device: MATSHITADVD-R UJ-857E
USB Device: Built-in iSight, (null) mA
USB Device: Keyboard Hub, (null) mA
USB Device: Apple Optical USB Mouse, (null) mA
USB Device: Apple Keyboard, (null) mA
USB Device: hub_device, (null) mA
USB Device: Apple Cinema Display, (null) mA
USB Device: Apple Internal Keyboard / Trackpad, (null) mA
USB Device: IR Receiver, (null) mA
USB Device: Bluetooth USB Host Controller, (null) mA
FireWire Device: unknown_device, unknown_value, unknown_speed

[greg]

Hi doogie859,

Our apologies, the current version of Espionage comes with a version of iSpy that can kernel panic rarely. We've fixed this bug and will be releasing a significant update to Espionage within a day or two, so hold tight. This upcoming update may also address the other issue that you were having with the password prompt not appearing.

As to whether or not the panic can cause data corruption, it is theoretically possible, but highly unlikely, and having the entire folder (as opposed to a single file) get corrupted is even less likely. Of course, regardless of the situation, we always strongly recommend you maintain backups of your files.

Let me know if you have any other questions!

Greg @ Tao Effect

[doogie859]

Upgrade to 2.1 seems to have repaired the authentication issue. Double-click-Unlocked and Contextual-menu-Locked many times without incident.

Thanks for your response.