From owner-freebsd-hackers@FreeBSD.ORG Thu Nov 17 18:40:32 2005 Return-Path: X-Original-To: freebsd-hackers@freebsd.org Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9378116A41F for ; Thu, 17 Nov 2005 18:40:32 +0000 (GMT) (envelope-from sebastien.bourdeauducq@gmail.com) Received: from zproxy.gmail.com (zproxy.gmail.com [64.233.162.205]) by mx1.FreeBSD.org (Postfix) with ESMTP id D980E43D46 for ; Thu, 17 Nov 2005 18:40:31 +0000 (GMT) (envelope-from sebastien.bourdeauducq@gmail.com) Received: by zproxy.gmail.com with SMTP id j2so2031777nzf for ; Thu, 17 Nov 2005 10:40:31 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:from:to:subject:date:user-agent:cc:references:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:message-id; b=Wkm3u7LcPB0TJ6IrXgUU4hBLDmAFJm+7NgcPrqdr7pX6tkkdJIJQFNm6Z7TisxwMrgOnpgJCN56i/rqcwohpN5qNTvSxxwRu79a10cvI1THhz5VJU/iar2ck1fHahx4J7XtoMAtKahNNJ7GZGw1G1d07DX9f0kGJg/8udN4czB4= Received: by 10.64.250.1 with SMTP id x1mr2110605qbh; Thu, 17 Nov 2005 10:40:26 -0800 (PST) Received: from oasis ( [82.231.252.157]) by mx.gmail.com with ESMTP id q16sm3483719qbq.2005.11.17.10.40.24; Thu, 17 Nov 2005 10:40:25 -0800 (PST) From: Sebastien To: John Baldwin Date: Thu, 17 Nov 2005 19:44:54 +0100 User-Agent: KMail/1.8.2 References: <200511121400.02075.sebastien.bourdeauducq@gmail.com> <200511141219.49573.jhb@freebsd.org> In-Reply-To: <200511141219.49573.jhb@freebsd.org> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200511171944.55256.sebastien.bourdeauducq@gmail.com> Cc: freebsd-hackers@freebsd.org Subject: Re: Trigerring a taskqueue from the if_start routine crashes FreeBSD6 X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Nov 2005 18:40:32 -0000 > I don't see anything in output_layer.c output_layer was OK. I finally managed to track down this bug : it is not in the taskqueue system, but sending the incrimined frames enables the device to receive packets, and the bug was in the RX path. Its randomness was because the crash depended on wireless APs around... > Note that it's ok to hold locks > over a call to free() so that your output_free() routine could be > simplified somewhat: Ok, applied. Thanks. Sebastien