From owner-freebsd-current@FreeBSD.ORG  Sat Jun 14 07:32:55 2003
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id BBF5F37B401; Sat, 14 Jun 2003 07:32:55 -0700 (PDT)
Received: from milla.ask33.net (milla.ask33.net [217.197.166.60])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 0FB7F43FB1; Sat, 14 Jun 2003 07:32:53 -0700 (PDT)
	(envelope-from nick@milla.ask33.net)
Received: by milla.ask33.net (Postfix, from userid 1001)
	id 07E223ABB72; Sat, 14 Jun 2003 16:35:21 +0200 (CEST)
Date: Sat, 14 Jun 2003 16:35:20 +0200
From: Pawel Jakub Dawidek <nick@garage.freebsd.pl>
To: Robert Watson <rwatson@freebsd.org>
Message-ID: <20030614143520.GB38547@garage.freebsd.pl>
References: <14937.24.25.227.132.1055546004.squirrel@webmail.tekgenesis.net>
	<Pine.NEB.3.96L.1030614022738.77989B-100000@fledge.watson.org>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="rJwd6BRFiFCcLxzm"
Content-Disposition: inline
In-Reply-To: <Pine.NEB.3.96L.1030614022738.77989B-100000@fledge.watson.org>
X-PGP-Key-URL: http://garage.freebsd.pl/jules.asc
X-OS: FreeBSD 4.8-RELEASE i386
X-URL: http://garage.freebsd.pl
User-Agent: Mutt/1.5.1i
cc: freebsd-current@freebsd.org
cc: Jason Dambrosio <jason@wiz.cx>
Subject: Re: 5.1-RELEASE panic, trace included
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 14 Jun 2003 14:32:56 -0000


--rJwd6BRFiFCcLxzm
Content-Type: text/plain; charset=iso-8859-2
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sat, Jun 14, 2003 at 02:28:33AM -0400, Robert Watson wrote:
+> If you have the kernel.debug for this kernel, could you send the gdb -k
+> output of:=20
+>=20
+> l *in6_pcbbind+0x2a7

I've looked at objdump -d kernel, and it looks like this is somewhere here:

214:					t =3D in_pcblookup_local(pcbinfo,
215:						sin.sin_addr, lport,
216:						INPLOOKUP_WILDCARD);
217:					if (t &&
218:					    (so->so_cred->cr_uid !=3D
219:					     t->inp_socket->so_cred->cr_uid) &&
220:					    (ntohl(t->inp_laddr.s_addr) !=3D
221:					     INADDR_ANY ||
222:					     INP_SOCKAF(so) =3D=3D
223:					     INP_SOCKAF(t->inp_socket)))
224:						return (EADDRINUSE);

We're talking about this line:

	test	%eax,%eax
	je	c03ac9c7 <in6_pcbbind+0x2e7>
	mov	0x64(%eax),%eax
	mov	%eax,0xffffffd0(%ebp)
=3D>	mov	0xc4(%eax),%edx
	mov	0xc4(%esi),%eax
	mov	0x4(%eax),%eax
	cmp	0x4(%edx),%eax
	je	c03ac9c7 <in6_pcbbind+0x2e7>

We're loading inp_socket->so_cred to edx here.
So it looks like inp_socket is NULL. Hmm, it is possible?

--=20
Pawel Jakub Dawidek                       pawel@dawidek.net
UNIX Systems Programmer/Administrator     http://garage.freebsd.pl
Am I Evil? Yes, I Am!                     http://cerber.sourceforge.net

--rJwd6BRFiFCcLxzm
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (FreeBSD)

iQCVAwUBPusyqD/PhmMH/Mf1AQHLIAQAijIc2u8Z2VEiH1m3U3EMur/HaSc/VIO6
oCMY/Z+nmv4QxEICm4fTPp6yXw2SCeKZjIr6yB/X1Sj9sAIU8bE47RLYLgSA8ehO
SZNoSI/sj6QLPmXc9QKJDYXbLMH90+WVUliFlBZ4jXn5mruNNGdfjb8OTf7D/iQc
3aDIa4JQC9I=
=nEZS
-----END PGP SIGNATURE-----

--rJwd6BRFiFCcLxzm--