From owner-freebsd-bugs@FreeBSD.ORG Sat Dec 8 10:30:00 2012 Return-Path: Delivered-To: freebsd-bugs@smarthost.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id CE524990 for ; Sat, 8 Dec 2012 10:30:00 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:1900:2254:206c::16:87]) by mx1.freebsd.org (Postfix) with ESMTP id 849AD8FC14 for ; Sat, 8 Dec 2012 10:30:00 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.5/8.14.5) with ESMTP id qB8AU0Fi008089 for ; Sat, 8 Dec 2012 10:30:00 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.5/8.14.5/Submit) id qB8AU03N008088; Sat, 8 Dec 2012 10:30:00 GMT (envelope-from gnats) Resent-Date: Sat, 8 Dec 2012 10:30:00 GMT Resent-Message-Id: <201212081030.qB8AU03N008088@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Poul-Henning Kamp Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 7A45E861 for ; Sat, 8 Dec 2012 10:28:09 +0000 (UTC) (envelope-from phk@critter.freebsd.dk) Received: from phk.freebsd.dk (phk.freebsd.dk [130.225.244.222]) by mx1.freebsd.org (Postfix) with ESMTP id 2D5CB8FC0C for ; Sat, 8 Dec 2012 10:28:08 +0000 (UTC) Received: from critter.freebsd.dk (critter.freebsd.dk [192.168.61.3]) by phk.freebsd.dk (Postfix) with ESMTP id 135738A3FC for ; Sat, 8 Dec 2012 10:28:02 +0000 (UTC) Received: from critter.freebsd.dk (localhost [127.0.0.1]) by critter.freebsd.dk (8.14.5/8.14.5) with ESMTP id qB8AS1t0009801 for ; Sat, 8 Dec 2012 10:28:01 GMT (envelope-from phk@critter.freebsd.dk) Received: (from phk@localhost) by critter.freebsd.dk (8.14.5/8.14.5/Submit) id qB8AS1Yj009800; Sat, 8 Dec 2012 10:28:01 GMT (envelope-from phk) Message-Id: <201212081028.qB8AS1Yj009800@critter.freebsd.dk> Date: Sat, 8 Dec 2012 10:28:01 GMT From: Poul-Henning Kamp To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Subject: kern/174276: if_ath memory modified after free X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list Reply-To: Poul-Henning Kamp List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 08 Dec 2012 10:30:00 -0000 >Number: 174276 >Category: kern >Synopsis: if_ath memory modified after free >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sat Dec 08 10:30:00 UTC 2012 >Closed-Date: >Last-Modified: >Originator: Poul-Henning Kamp >Release: FreeBSD 10.0-CURRENT amd64 >Organization: >Environment: System: FreeBSD critter.freebsd.dk 10.0-CURRENT FreeBSD 10.0-CURRENT #0 r238860M: Sat Jul 28 13:18:52 UTC 2012 root@critter.freebsd.dk:/usr/obj/freebsd/head/sys/CRITTER amd64 >Description: ath0: ath_rx_proc: kickpcu; handled 1 packets ath0: ath_rx_proc: kickpcu; handled 1 packets Memory modified after free 0xfffffe003cdff800(2048) val=80 @ 0xfffffe003cdff800 ath0: ath_rx_proc: kickpcu; handled 1 packets Memory modified after free 0xfffffe003cb8a800(2048) val=80 @ 0xfffffe003cb8a800 ath0: ath_rx_proc: kickpcu; handled 1 packets Memory modified after free 0xfffffe003cda1800(2048) val=80 @ 0xfffffe003cda1800 >How-To-Repeat: >Fix: >Release-Note: >Audit-Trail: >Unformatted: