From owner-freebsd-bugs Tue Jun 27 5:20: 6 2000 Delivered-To: freebsd-bugs@freebsd.org Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21]) by hub.freebsd.org (Postfix) with ESMTP id F03CD37BE7E for ; Tue, 27 Jun 2000 05:20:00 -0700 (PDT) (envelope-from gnats@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.9.3/8.9.2) id FAA36965; Tue, 27 Jun 2000 05:20:01 -0700 (PDT) (envelope-from gnats@FreeBSD.org) Received: from vega.uli.it (vega.uli.it [62.212.0.2]) by hub.freebsd.org (Postfix) with ESMTP id F3DCE37B5E4 for ; Tue, 27 Jun 2000 05:13:29 -0700 (PDT) (envelope-from olgeni@uli.it) Received: from dev1.localdomain.net (ippp10.mi.uli.it [62.212.5.70]) by vega.uli.it (Postfix) with ESMTP id A2F8D3B013 for ; Tue, 27 Jun 2000 14:13:26 +0200 (CEST) Message-Id: Date: Tue, 27 Jun 2000 14:12:05 +0200 (CEST) From: Jimmy Olgeni To: FreeBSD-gnats-submit@freebsd.org Subject: kern/19544: panic in delete_pipe (ipfw pipe delete) Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org >Number: 19544 >Category: kern >Synopsis: panic in delete_pipe >Confidential: no >Severity: critical >Priority: high >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Tue Jun 27 05:20:00 PDT 2000 >Closed-Date: >Last-Modified: >Originator: Jimmy Olgeni >Release: FreeBSD 4.0-STABLE i386 >Organization: Colby >Environment: Kernel that supports dummynet. >Description: If there are no dummynet pipes configured in the system, an attempt to delete any pipe with "ipfw pipe delete" will result in a kernel panic (trap 12). (kgdb) up #3 0xc032fe09 in trap_pfault (frame=0xc64a0d58, usermode=0, eva=0) at ../../i386/i386/trap.c:820 820 trap_fatal(frame, eva); (kgdb) up #4 0xc032f9c3 in trap (frame={tf_fs = 16, tf_es = 16, tf_ds = 16, tf_edi = -968225348, tf_esi = 0, tf_ebp = -968225368, tf_isp = -968225404, tf_ebx = -1058306304, tf_edx = -968232960, tf_ecx = 0, tf_eax = 0, tf_trapno = 12, tf_err = 0, tf_eip = -1071642696, tf_cs = 8, tf_eflags = 66182, tf_esp = -968225348, tf_ss = 0}) at ../../i386/i386/trap.c:426 426 (void) trap_pfault(&frame, FALSE, eva); (kgdb) up #5 0xc02007b8 in delete_pipe (p=0xc64a0dbc) at ../../netinet/ip_dummynet.c:1559 1559 all_pipes = b->next ; (kgdb) print b $1 = (struct dn_pipe *) 0x0 ^^^^^^^^^^^^^^^^^^^^^^^^^^^ (kgdb) up #6 0xc0200c32 in ip_dn_ctl (sopt=0xc64a0f14) at ../../netinet/ip_dummynet.c:1750 1750 error = delete_pipe(p); (kgdb) print p $2 = (struct dn_pipe *) 0xc64a0dbc (kgdb) >How-To-Repeat: As root, run: # ipfw pipe show [to check that the pipe list is really empty] # ipfw pipe delete 1 [panic] >Fix: >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message