From owner-freebsd-hackers Tue Feb 17 03:11:42 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id DAA28691 for freebsd-hackers-outgoing; Tue, 17 Feb 1998 03:11:42 -0800 (PST) (envelope-from owner-freebsd-hackers@FreeBSD.ORG) Received: from dingo.cdrom.com (dingo.cdrom.com [204.216.28.145]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id DAA28686 for ; Tue, 17 Feb 1998 03:11:39 -0800 (PST) (envelope-from mike@dingo.cdrom.com) Received: from dingo.cdrom.com (localhost [127.0.0.1]) by dingo.cdrom.com (8.8.8/8.8.5) with ESMTP id DAA01377; Tue, 17 Feb 1998 03:10:44 -0800 (PST) Message-Id: <199802171110.DAA01377@dingo.cdrom.com> X-Mailer: exmh version 2.0zeta 7/24/97 To: Eivind Eklund cc: hackers@FreeBSD.ORG Subject: Re: ed overwrite clue? In-reply-to: Your message of "Tue, 17 Feb 1998 11:46:23 +0100." <19980217114623.18048@follo.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Tue, 17 Feb 1998 03:10:43 -0800 From: Mike Smith Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > This might be a clue for the strange ED overwrites (or it might be > something completely unrelated :-) It looks kinda interesting, at any rate: > I'm getting panic()s from if_ed.c overwriting strange locations from > > > /* get pointer to this buffer's header structure */ > packet_ptr = sc->mem_ring + > (sc->next_packet - sc->rec_page_start) * ED_PAGE_SIZE; > > /* > * The byte count includes a 4 byte header that was added by > * the NIC. > */ > if (sc->mem_shared) > packet_hdr = *(struct ed_ring *) packet_ptr; > else > HERE--> ed_pio_readmem(sc, (int)packet_ptr, (char *) &packet_hdr, > sizeof(packet_hdr)); Weird. The destination should be on the stack - are you comfortable that you haven't overrun the end of the stack? > #4 0xf01b34ae in ed_pio_readmem (sc=0xf01ed400, src=25088, > dst=0xefbfffc0 "'", amount=4) at machine/cpufunc.h:185 In my copy of cpufunc.h, line 185 is insb(). Is this an 8-bit card? (Don't let my questions distract you, I'm just curious...) -- \\ Sometimes you're ahead, \\ Mike Smith \\ sometimes you're behind. \\ mike@smith.net.au \\ The race is long, and in the \\ msmith@freebsd.org \\ end it's only with yourself. \\ msmith@cdrom.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message