From owner-freebsd-bugs  Sun Mar  7  8: 0:51 1999
Delivered-To: freebsd-bugs@freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21])
	by hub.freebsd.org (Postfix) with ESMTP id A44F414CE7
	for <freebsd-bugs@FreeBSD.org>; Sun,  7 Mar 1999 08:00:15 -0800 (PST)
	(envelope-from gnats@FreeBSD.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.9.2/8.9.2) id IAA78516;
	Sun, 7 Mar 1999 08:00:01 -0800 (PST)
	(envelope-from gnats@FreeBSD.org)
Received: by hub.freebsd.org (Postfix, from userid 32767)
	id 822D814CDE; Sun,  7 Mar 1999 07:51:44 -0800 (PST)
Message-Id: <19990307155144.822D814CDE@hub.freebsd.org>
Date: Sun,  7 Mar 1999 07:51:44 -0800 (PST)
From: sanewo@ba2.so-net.ne.jp
To: freebsd-gnats-submit@freebsd.org
X-Send-Pr-Version: www-1.0
Subject: bin/10462: boot loader panics with "unload"
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


>Number:         10462
>Category:       bin
>Synopsis:       boot loader panics with "unload"
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Mar  7 08:00:01 PST 1999
>Closed-Date:
>Last-Modified:
>Originator:     Takanori Saneto
>Release:        4.0-CURRENT as of 1999-March-06
>Organization:
An individual
>Environment:
FreeBSD muse 4.0-CURRENT FreeBSD 4.0-CURRENT #43: Sat Mar  6 10:26:23 JST 1999     sanewo@muse:/usr/src/sys/compile/MUSE  i386
>Description:
On boot loader prompt, "unload" command causes panic and system restarts immediately.

>How-To-Repeat:
/boot/loader.rc contains:

load kernel
load -t userconfig_script pnp.conf
load -t splash_image_data onsenL8.BMP
load splash_bmp
autoboot

while "autoboot" countdown is in progress, type anything and enter loader prompt mode.
On loader prompt, type "unload" and you may see "panic" message.

>Fix:
I looked into the loader code and found that there is problem with the return value (string) of mod_searchfile().
The string, which is allocated by mod_searchfile(), will be free()ed when mod_searchfile() called next time.
"unload" command tries to free() that string (module name) again, and panics.

Quick fix will be to stop free()ing in mod_searchfile().


>Release-Note:
>Audit-Trail:
>Unformatted:


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message