From owner-freebsd-current@FreeBSD.ORG  Wed Feb  4 05:41:02 2004
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id E626E16A4CE; Wed,  4 Feb 2004 05:41:02 -0800 (PST)
Received: from smtp1.powertech.no (smtp1.powertech.no [195.159.0.145])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id C66D643D2F; Wed,  4 Feb 2004 05:41:01 -0800 (PST)
	(envelope-from frode@nordahl.net)
Received: from [195.159.6.12] (dhcp12.ns5.powertech.no [195.159.6.12])
	by smtp1.powertech.no (Postfix) with ESMTP
	id 0E3AE888A; Wed,  4 Feb 2004 14:41:01 +0100 (CET)
In-Reply-To: <200402031106.i13B6A7E002768@gw.catspoiler.org>
References: <200402031106.i13B6A7E002768@gw.catspoiler.org>
Mime-Version: 1.0 (Apple Message framework v612)
Content-Type: text/plain; charset=US-ASCII; format=flowed
Message-Id: <C4DF668E-5717-11D8-B0FA-000A95A9A574@nordahl.net>
Content-Transfer-Encoding: 7bit
From: Frode Nordahl <frode@nordahl.net>
Date: Wed, 4 Feb 2004 14:41:00 +0100
To: Don Lewis <truckman@FreeBSD.org>
X-Mailer: Apple Mail (2.612)
cc: bsder@allcaps.org
cc: freebsd-current@FreeBSD.org
Subject: Re: rpc.lockd(8) seg faults on 5.2-RELEASE
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Feb 2004 13:41:03 -0000


On Feb 3, 2004, at 12:06, Don Lewis wrote:
>
> Probably not a NULL pointer because &ifl->filehandle will be the same
> value as (char *)ifl+offsetof(struct file_lock, filehandle), and
> LIST_FOREACH() will bail out when ifl is NULL.  It would be interesting
> to walk the lock list starting at nfslocklist_head and following the
> nfslocklist links so see if any of the link values look bogus.

hum, on my last core dump, nfslocklist_head->lh_first->le_next and 
le_prev are uninitialized pointers.

Other dumps have other results though, I'll look more into it tonight.

(using malloc.conf -> J)

(gdb) print *nfslocklist_head->lh_first
$3 = {nfslocklist = {le_next = 0xd0d0d0d0, le_prev = 0xd0d0d0d0},
   filehandle = {fh_fsid = {val = {-791621424, -791621424}}, fh_fid = {
       fid_len = 53456, fid_reserved = 53456,
       fid_data = '?' <repeats 16 times>}}, addr = 0xd0d0d0d0, client = {
     exclusive = -791621424, svid = 3503345872, oh = {n_len = 3503345872,
       n_bytes = 0xd0d0d0d0 <Address 0xd0d0d0d0 out of bounds>},
     l_offset = 15046755950319947984, l_len = 15046755950319947984},
   client_cookie = {n_len = 3503345872,
     n_bytes = 0xd0d0d0d0 <Address 0xd0d0d0d0 out of bounds>},
   client_name = '?' <repeats 1024 times>, nsm_status = -791621424,
   status = -791621424, flags = -791621424, blocking = -791621424,
   locker = -791621424, fd = -791621424}

Mvh,
Frode