From owner-freebsd-current@FreeBSD.ORG  Tue Apr 17 15:26:17 2007
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
X-Original-To: current@FreeBSD.org
Delivered-To: freebsd-current@FreeBSD.ORG
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 5F2FB16A403
	for <current@FreeBSD.org>; Tue, 17 Apr 2007 15:26:17 +0000 (UTC)
	(envelope-from andre@freebsd.org)
Received: from c00l3r.networx.ch (c00l3r.networx.ch [62.48.2.2])
	by mx1.freebsd.org (Postfix) with ESMTP id CA49113C44B
	for <current@FreeBSD.org>; Tue, 17 Apr 2007 15:26:16 +0000 (UTC)
	(envelope-from andre@freebsd.org)
Received: (qmail 96321 invoked from network); 17 Apr 2007 14:50:15 -0000
Received: from dotat.atdotat.at (HELO [62.48.0.47]) ([62.48.0.47])
	(envelope-sender <andre@freebsd.org>)
	by c00l3r.networx.ch (qmail-ldap-1.03) with SMTP
	for <kris@obsecurity.org>; 17 Apr 2007 14:50:15 -0000
Message-ID: <4624E717.1040208@freebsd.org>
Date: Tue, 17 Apr 2007 17:26:15 +0200
From: Andre Oppermann <andre@freebsd.org>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US;
	rv:1.8b) Gecko/20050217
MIME-Version: 1.0
To: Kris Kennaway <kris@obsecurity.org>
References: <20070416193727.GA66684@xor.obsecurity.org>
In-Reply-To: <20070416193727.GA66684@xor.obsecurity.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: current@FreeBSD.org, net@FreeBSD.org
Subject: Re: Page fault in syncache_drop
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>, 
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Apr 2007 15:26:17 -0000

Kris Kennaway wrote:
> 8-core amd64, up-to-date CVS sources
> 
> Fatal trap 12: page fault while in kernel mode
> cpuid = 0; apic id = 00
> fault virtual address   = 0x0
> fault code              = supervisor read data, page not present
> instruction pointer     = 0x8:0xffffffff803134b4
> stack pointer           = 0x10:0xffffffffabe09890
> frame pointer           = 0x10:0xffffffffabe098a0
> code segment            = base 0x0, limit 0xfffff, type 0x1b
>                         = DPL 0, pres 1, long 1, def32 0, gran 1
> processor eflags        = interrupt enabled, resume, IOPL = 0
> current process         = 37 (irq31: bge0)
> [thread pid 37 tid 100043 ]
> Stopped at      syncache_drop+0x4:      cmpq    $0,(%rdi)
> db> wh
> Tracing pid 37 tid 100043 td 0xffffff00b9409580
> syncache_drop() at syncache_drop+0x4
> syncache_add() at syncache_add+0x263
> tcp_input() at tcp_input+0x7e0
> ip_input() at ip_input+0x69d
> netisr_dispatch() at netisr_dispatch+0x51
> ether_demux() at ether_demux+0x19f
> ether_input() at ether_input+0x3a8
> bge_rxeof() at bge_rxeof+0x3ad
> bge_intr() at bge_intr+0x11b
> ithread_execute_handlers() at ithread_execute_handlers+0x15d
> ithread_loop() at ithread_loop+0x69
> fork_exit() at fork_exit+0x93
> fork_trampoline() at fork_trampoline+0xe
> --- trap 0, rip = 0, rsp = 0xffffffffabe09d30, rbp = 0 ---

Fixed in rev. 1.110 of sys/netinet/tcp_syncache.c.

-- 
Andre