From owner-freebsd-hackers Mon Aug 12 23:53:46 1996 Return-Path: owner-hackers Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id XAA25680 for hackers-outgoing; Mon, 12 Aug 1996 23:53:46 -0700 (PDT) Received: from irz301.inf.tu-dresden.de (irz301.inf.tu-dresden.de [141.76.1.11]) by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id XAA25675 for ; Mon, 12 Aug 1996 23:53:43 -0700 (PDT) Received: from sax.sax.de (sax.sax.de [193.175.26.33]) by irz301.inf.tu-dresden.de (8.6.12/8.6.12-s1) with ESMTP id IAA22401; Tue, 13 Aug 1996 08:51:41 +0200 Received: (from uucp@localhost) by sax.sax.de (8.6.12/8.6.12-s1) with UUCP id IAA01595; Tue, 13 Aug 1996 08:51:41 +0200 Received: (from j@localhost) by uriah.heep.sax.de (8.7.5/8.6.9) id IAA03159; Tue, 13 Aug 1996 08:45:06 +0200 (MET DST) From: J Wunsch Message-Id: <199608130645.IAA03159@uriah.heep.sax.de> Subject: Re: machine crashing, what panic: free means? To: freebsd-hackers@freebsd.org (FreeBSD hackers) Date: Tue, 13 Aug 1996 08:45:06 +0200 (MET DST) Cc: lmcsato@lmc.ericsson.se (Samy Touati) Reply-To: joerg_wunsch@uriah.heep.sax.de (Joerg Wunsch) In-Reply-To: from Samy Touati at "Aug 12, 96 10:41:26 pm" X-Phone: +49-351-2012 669 X-PGP-Fingerprint: DC 47 E6 E4 FF A6 E9 8F 93 21 E0 7D F9 12 D6 4E X-Mailer: ELM [version 2.4ME+ PL17 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-hackers@freebsd.org X-Loop: FreeBSD.org Precedence: bulk As Samy Touati wrote: > #0 boot (howto=256) at ../../i386/i386/machdep.c:892 > #1 0xf0112a73 in panic (fmt=0xf010baa2 "free: multiple frees") > at ../../kern/subr_prf.c:124 > #2 0xf010bb83 in free (addr=0xf05c4b80, type=1) > at ../../kern/kern_malloc.c:337 > #3 0xf0138aca in pppstart (tp=0xf01b52e8) at ../../net/if_ppp.c:1042 > #4 0xf019ed7b in siopoll () at ../../i386/isa/sio.c:1554 > #5 0xf0187067 in doreti_swi () > #6 0xf018f25c in cpu_switch () > > > After browsing through the sources, it seems that the problem is related > to the sio port being saturated. No, your conclusion is wrong. It's rather that the code on line 1042 in sys/net/if_ppp.c has called a free() which was a duplicate free. This should not happen, regardless of whether the port is saturated or not. -- cheers, J"org joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE Never trust an operating system you don't have sources for. ;-)