From owner-freebsd-net Wed Nov 21 9:59:14 2001 Delivered-To: freebsd-net@freebsd.org Received: from salmon.maths.tcd.ie (salmon.maths.tcd.ie [134.226.81.11]) by hub.freebsd.org (Postfix) with SMTP id 328D837B418 for ; Wed, 21 Nov 2001 09:59:11 -0800 (PST) Received: from walton.maths.tcd.ie by salmon.maths.tcd.ie with SMTP id ; 21 Nov 2001 17:59:10 +0000 (GMT) To: Rudi Mathijssen Cc: "'freebsd-net@FreeBSD.org'" Subject: Re: kernel backtrace for kern/28844 In-Reply-To: Your message of "Wed, 21 Nov 2001 17:14:59 +0100." <8BA878388251D311B08200508B449FD10D0E3F4A@BEHDEVEX1> Date: Wed, 21 Nov 2001 17:59:09 +0000 From: Ian Dowse Message-ID: <200111211759.aa36148@salmon.maths.tcd.ie> Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org In message <8BA878388251D311B08200508B449FD10D0E3F4A@BEHDEVEX1>, Rudi Mathijsse n writes: >--- >Fatal trap 12: page fault while in kernel mode >fault virtual address = 0x79c02812 This is caused by a bug in ip_icmp.c relating to the generation of ICMP redirect messages that was fixed just before 4.3-RELEASE. The problem will go away if you upgrade to a more recent release. I can be almost 100% certain that this particular bug is the cause of your crashes because of the virtual address above. The bug caused the two most significant bytes of the mbuf mh_next pointer to get swapped, so a valid address 0xc0792812 got changed to 0x79c02812. It's a pity that not all bugs have such distinctive signatures :-) Ian To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message