From owner-cvs-all  Thu Mar  8 13:52:50 2001
Delivered-To: cvs-all@freebsd.org
Received: from salmon.maths.tcd.ie (salmon.maths.tcd.ie [134.226.81.11])
	by hub.freebsd.org (Postfix) with SMTP
	id 7B64837B71A; Thu,  8 Mar 2001 13:52:46 -0800 (PST)
	(envelope-from iedowse@maths.tcd.ie)
Received: from walton.maths.tcd.ie by salmon.maths.tcd.ie with SMTP
          id <aa56671@salmon>; 8 Mar 2001 21:52:45 +0000 (GMT)
To: "Rodney W. Grimes" <freebsd@gndrsh.dnsmgr.net>
Cc: phk@critter.freebsd.dk, cvs-committers@FreeBSD.org,
	cvs-all@FreeBSD.org, iedowse@maths.tcd.ie
Subject: Re: cvs commit: src/sys/netinet ip_icmp.c ip_input.c 
In-Reply-To: Your message of "Thu, 08 Mar 2001 13:40:44 PST."
             <200103082140.NAA26756@gndrsh.dnsmgr.net> 
Date: Thu, 08 Mar 2001 21:52:45 +0000
From: Ian Dowse <iedowse@maths.tcd.ie>
Message-ID:  <200103082152.aa56671@salmon.maths.tcd.ie>
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

In message <200103082140.NAA26756@gndrsh.dnsmgr.net>, "Rodney W. Grimes" writes
:
>
>Also this patch doesnt touch ip_output, which is where the panic
>occurs.

Yes, the two problems look quite different. The hallmark of the
icmp_error bug is a fault address where the two high-bytes have
been swapped (e.g. 0x12c03400), not a NULL deref.

I haven't managed to match up the short dissassembly posted to
-stable with the ip_output source code yet - do we have any further
details now?

Ian

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message