Date: Wed, 20 Feb 2002 13:20:54 -0800 From: "Jeremiah Gowdy" <data@dualcpus.com> To: "Andrew Gallatin" <gallatin@cs.duke.edu> Cc: <stable@freebsd.org> Subject: Re: Panic in 4.4/4.5-STABLE Message-ID: <000401c1ba55$6cfa1600$60e2cbd8@cx2075317a> References: <15476.2191.868426.998960@grasshopper.cs.duke.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
> Post the stacktrace, and also post the size that nge_jfree() was
> called with.
I see this call to nge_jfree(cf0581d0,0). Is cf0581d0 a pointer to the
location of the first parameter of nge_jfree() ? How do I view this value
in DDB ?
Here's the stacktrace:
panic: nge_jfree: freeing buffer of wrong size!
mp_lock = 00000001; cpuid = 0; lapic.id = 01000000
Debugger("panic")
Stopped at Debugger+0x34: movb $0,in_Debugger.627
db> trace
Debugger(c0253ea) at Debugger+0x34
panic(c0272b60,c0a74000,d0d6ed04,c010735,cf0581d0) at panic+0xa4
nge_jfree(cf0581d0,0) at nge_jfree+0x2f
m_free(c0a74000) at m_free+0x55
m_freem(c0a73f00,c3c1e500,d0d6ed34,c0262941,c3c1e534) at m_freem+0x12
md_done(c3c1e534,c3c1e510) at md_done+0x13
smb_rq_done(c3c1e500) at smb_rq_done+0x19
smb_t2_request_int(c3b1e980,c31e99c,c3aec24c,d0d6edd8,c023779b) at
smb_t2_request_int+0x61b
smb_t2_request(c3b1e980,c3b1e99c,1,c3b1e99c,c3b61200) at smb_t2_request+0x2
smbfs_smb_statfs2(c3b61200,c3aec24c,d0d6edf8,c3aec200,c3aec24c) at
smbfs_smb_statfs2+0x57
smbfs_statfs(c3aec200,c3aec2c,d0d47780) at smbfs_statfs+0x6f
fstatfs(d0d47780,d0d6ef80,280f66e4,3,5) at fstatfs+0x56
syscall2(2f,2f,2f,5,3) at syscall2+0x3d
Xint0x80_syscall() at Xint0x80_syscall+0x2b
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000401c1ba55$6cfa1600$60e2cbd8>