From owner-freebsd-alpha@FreeBSD.ORG Thu Apr 15 22:48:08 2004 Return-Path: Delivered-To: freebsd-alpha@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 27DDD16A4CE; Thu, 15 Apr 2004 22:48:08 -0700 (PDT) Received: from mta7.pltn13.pbi.net (mta7.pltn13.pbi.net [64.164.98.8]) by mx1.FreeBSD.org (Postfix) with ESMTP id E85E743D41; Thu, 15 Apr 2004 22:48:07 -0700 (PDT) (envelope-from kris@obsecurity.org) Received: from obsecurity.dyndns.org (79cf76e2c7c83dccc3e3cc5934390c47@adsl-67-115-73-128.dsl.lsan03.pacbell.net [67.115.73.128])i3G5m4t5012675; Thu, 15 Apr 2004 22:48:05 -0700 (PDT) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id 4FBDD52345; Thu, 15 Apr 2004 22:48:04 -0700 (PDT) Date: Thu, 15 Apr 2004 22:48:04 -0700 From: Kris Kennaway To: Alan Cox Message-ID: <20040416054804.GA79165@xor.obsecurity.org> References: <20040411093343.GA89809@xor.obsecurity.org> <200404132236.20792.jhb@FreeBSD.org> <16509.42895.49213.222503@grasshopper.cs.duke.edu> <20040416045453.GA78366@xor.obsecurity.org> <407F68BA.6000405@imimic.com> <20040416053930.GA78940@xor.obsecurity.org> <20040416054340.GZ238@cs.rice.edu> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="6TrnltStXW4iwmi0" Content-Disposition: inline In-Reply-To: <20040416054340.GZ238@cs.rice.edu> User-Agent: Mutt/1.4.2.1i cc: alc@FreeBSD.org cc: "Alan L. Cox" cc: alpha@FreeBSD.org cc: Andrew Gallatin cc: Kris Kennaway Subject: Re: Another alpha panic X-BeenThere: freebsd-alpha@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Porting FreeBSD to the Alpha List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Apr 2004 05:48:08 -0000 --6TrnltStXW4iwmi0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Apr 16, 2004 at 12:43:40AM -0500, Alan Cox wrote: > On Thu, Apr 15, 2004 at 10:39:30PM -0700, Kris Kennaway wrote: > >=20 > > Line 2740 seems to be: > >=20 > > td->td_pcb->pcb_hw.apcb_ptbr =3D > > ALPHA_K0SEG_TO_PHYS((vm_offset_t) pmap->pm_lev1) >> PAG= E_SHIFT; > >=20 >=20 > Can you provide a disassembly of pmap_activate()? The point being to det= ermine > which of the above dereferences is faulting. >=20 > Alan Dump of assembler code for function pmap_activate: 0xfffffc00005cf0b0 : ldah gp,14(t12) 0xfffffc00005cf0b4 : lda gp,17112(gp) 0xfffffc00005cf0b8 : lda sp,-32(sp) 0xfffffc00005cf0bc : stq ra,0(sp) 0xfffffc00005cf0c0 : stq s0,8(sp) 0xfffffc00005cf0c4 : stq s1,16(sp) 0xfffffc00005cf0c8 : mov a0,s1 0xfffffc00005cf0cc : ldq t0,0(a0) 0xfffffc00005cf0d0 : ldq t0,280(t0) 0xfffffc00005cf0d4 : lda s0,272(t0) 0xfffffc00005cf0d8 : ldq t12,-21592(gp) 0xfffffc00005cf0dc : jsr ra,(t12),0xfffffc00005ca080= 0xfffffc00005cf0e0 : ldah gp,14(ra) 0xfffffc00005cf0e4 : lda gp,17064(gp) 0xfffffc00005cf0e8 : ldq t2,-5128(gp) 0xfffffc00005cf0ec : ldl t0,60(t7) 0xfffffc00005cf0f0 : zapnot t0,0xf,t0 0xfffffc00005cf0f4 : s8addq t0,t2,t0 0xfffffc00005cf0f8 : ldq t0,0(t0) 0xfffffc00005cf0fc : beq t0,0xfffffc00005cf14c 0xfffffc00005cf100 : ldl t0,60(t7) 0xfffffc00005cf104 : zapnot t0,0xf,t0 0xfffffc00005cf108 : s8addq t0,t2,t0 0xfffffc00005cf10c : ldq t0,0(t0) 0xfffffc00005cf110 : cmpeq s0,t0,t0 0xfffffc00005cf114 : bne t0,0xfffffc00005cf14c 0xfffffc00005cf118 : ldl t0,60(t7) 0xfffffc00005cf11c : zapnot t0,0xf,t0 0xfffffc00005cf120 : s8addq t0,t2,t0 0xfffffc00005cf124 : ldq t1,0(t0) 0xfffffc00005cf128 : ldl t0,64(t7) 0xfffffc00005cf12c : ldl_l t3,32(t1) 0xfffffc00005cf130 : andnot t3,t0,t3 0xfffffc00005cf134 : stl_c t3,32(t1) 0xfffffc00005cf138 : beq t3,0xfffffc000061dbb4 0xfffffc00005cf13c : ldl t0,60(t7) 0xfffffc00005cf140 : zapnot t0,0xf,t0 0xfffffc00005cf144 : s8addq t0,t2,t0 0xfffffc00005cf148 : stq zero,0(t0) 0xfffffc00005cf14c : ldq t2,416(s1) 0xfffffc00005cf150 : ldq t1,0(s0) 0xfffffc00005cf154 : ldah t0,-64 0xfffffc00005cf158 : srl t0,0x16,t0 0xfffffc00005cf15c : and t1,t0,t1 0xfffffc00005cf160 : srl t1,0xd,t1 0xfffffc00005cf164 : stq t1,16(t2) 0xfffffc00005cf168 : ldl t0,60(t7) 0xfffffc00005cf16c : zapnot t0,0xf,t0 0xfffffc00005cf170 : s4addq t0,s0,t0 0xfffffc00005cf174 : ldl t1,36(t0) 0xfffffc00005cf178 : zapnot t1,0xf,t1 0xfffffc00005cf17c : ldl t0,172(t7) 0xfffffc00005cf180 : zapnot t0,0xf,t0 0xfffffc00005cf184 : srl t1,0x8,t1 0xfffffc00005cf188 : cmpeq t0,t1,t0 0xfffffc00005cf18c : bne t0,0xfffffc00005cf198 0xfffffc00005cf190 : mov s0,a0 0xfffffc00005cf194 : bsr ra,0xfffffc00005cb4c8 0xfffffc00005cf198 : ldl t0,60(t7) 0xfffffc00005cf19c : zapnot t0,0xf,t0 0xfffffc00005cf1a0 : ldq t1,-5128(gp) 0xfffffc00005cf1a4 : s8addq t0,t1,t0 0xfffffc00005cf1a8 : stq s0,0(t0) 0xfffffc00005cf1ac : ldl t0,64(t7) 0xfffffc00005cf1b0 : ldl_l t1,32(s0) 0xfffffc00005cf1b4 : or t1,t0,t1 0xfffffc00005cf1b8 : stl_c t1,32(s0) 0xfffffc00005cf1bc : beq t1,0xfffffc000061dbb8 0xfffffc00005cf1c0 : ldq t2,416(s1) 0xfffffc00005cf1c4 : ldl t0,60(t7) 0xfffffc00005cf1c8 : zapnot t0,0xf,t0 0xfffffc00005cf1cc : s4addq t0,s0,t0 0xfffffc00005cf1d0 : ldq_u t1,36(t0) 0xfffffc00005cf1d4 : lda t0,36(t0) 0xfffffc00005cf1d8 : extbl t1,t0,t1 0xfffffc00005cf1dc : stl t1,28(t2) 0xfffffc00005cf1e0 : ldq t12,-22960(gp) 0xfffffc00005cf1e4 : jsr ra,(t12),0xfffffc00005ca0b0= 0xfffffc00005cf1e8 : ldah gp,14(ra) 0xfffffc00005cf1ec : lda gp,16800(gp) 0xfffffc00005cf1f0 : ldq t0,0(t7) 0xfffffc00005cf1f4 : cmpeq s1,t0,t0 0xfffffc00005cf1f8 : beq t0,0xfffffc00005cf210 0xfffffc00005cf1fc : ldq a0,560(s1) 0xfffffc00005cf200 : call_pal 0x30 0xfffffc00005cf204 : unop 0xfffffc00005cf208 : nop 0xfffffc00005cf20c : unop 0xfffffc00005cf210 : ldq ra,0(sp) 0xfffffc00005cf214 : ldq s0,8(sp) 0xfffffc00005cf218 : ldq s1,16(sp) 0xfffffc00005cf21c : lda sp,32(sp) 0xfffffc00005cf220 : ret 0xfffffc00005cf224 : unop 0xfffffc00005cf228 : nop 0xfffffc00005cf22c : unop --6TrnltStXW4iwmi0 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQFAf3OTWry0BWjoQKURAs4sAJ9iddYUUjZNRDPoZg2tJ8rJADi3sQCdGvN5 oJWAfhm4uY9oRZ5M0Oncqtc= =tpEl -----END PGP SIGNATURE----- --6TrnltStXW4iwmi0--