From owner-freebsd-current Wed Dec 25 12:57:33 2002 Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E434537B401 for ; Wed, 25 Dec 2002 12:57:31 -0800 (PST) Received: from critter.freebsd.dk (critter.freebsd.dk [212.242.86.163]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1C8CC43ED8 for ; Wed, 25 Dec 2002 12:57:31 -0800 (PST) (envelope-from phk@critter.freebsd.dk) Received: from critter.freebsd.dk (localhost [127.0.0.1]) by critter.freebsd.dk (8.12.6/8.12.6) with ESMTP id gBPKvQIn023397 for ; Wed, 25 Dec 2002 21:57:27 +0100 (CET) (envelope-from phk@critter.freebsd.dk) To: current@freebsd.org Subject: RELENG_5_0 netcat/UDP panic From: Poul-Henning Kamp Date: Wed, 25 Dec 2002 21:57:26 +0100 Message-ID: <23396.1040849846@critter.freebsd.dk> Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG RELENG_5_0 GENERIC with DDB enabled. ifconfig 3 of four interfaces on a DLink 580TX card Run four times: nc -l -p 2000 -u > /dev/null & On other machines, suitably network configured and connected: cat /dev/zero | nc -u 10.1.0.2 2000 & cat /dev/zero | nc -u 10.2.0.2 2000 & cat /dev/zero | nc -u 10.3.0.2 2000 & After a few seconds, I get a panic: fault virtual address = 0xb ... Stopped at ip_input+0x610: cmpw 0xa(%ebx),%dx Show registers confirm what the above claims: %ebx = 0x1 As far as I can tell from the assembly, this is the first comparison in this loop: TAILQ_FOREACH(fp, &ipq[sum], ipq_list) if (ip->ip_id == fp->ipq_id && ip->ip_src.s_addr == fp->ipq_src.s_addr && ip->ip_dst.s_addr == fp->ipq_dst.s_addr && -- Poul-Henning Kamp | UNIX since Zilog Zeus 3.20 phk@FreeBSD.ORG | TCP/IP since RFC 956 FreeBSD committer | BSD since 4.3-tahoe Never attribute to malice what can adequately be explained by incompetence. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message