Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 31 Jan 2005 19:22:13 +0100
From:      Hannes Mehnert <hannes@mehnert.org>
To:        freebsd-sparc64@FreeBSD.org
Subject:   Memory modified after free
Message-ID:  <20050131182213.GC63301@mehnert.org>

next in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

I just got a panic with a FreeBSD 5.3-STABLE on sparc64 (sun enterprise
450 with 2 cpus), last updatet on 2005-01-24. I found the same problem
in the archives
(http://lists.freebsd.org/pipermail/freebsd-sparc64/2004-September/002131.html),
but no solution/bugfix for the problem.

I have two stack traces:
1st:

Memory modified after free 0xfffff800468cda00(504) val=deadc0dd @
0xfffff800468c
db20
panic: Most recently used by file desc

cpuid = 1
KDB: stack backtrace:
mtrash_ctor() at mtrash_ctor+0x7c
uma_zalloc_arg() at uma_zalloc_arg+0x3e8
malloc() at malloc+0xa8
fdinit() at fdinit+0x40
fdcopy() at fdcopy+0x28
fork1() at fork1+0x768
fork() at fork+0x10
syscall() at syscall+0x220
- -- syscall (2, FreeBSD ELF64, fork) %o7=0x135ac0 --
userland() at 0x406af0c8
user trace: trap %o7=0x135ac0
pc 0x406af0c8, sp 0x7fdffffca11
pc 0x129b24, sp 0x7fdffffcaf1
pc 0x12678c, sp 0x7fdffffcc61
pc 0x12781c, sp 0x7fdffffcd31
pc 0x127af0, sp 0x7fdffffce21
pc 0x126a98, sp 0x7fdffffcee1
pc 0x15eed0, sp 0x7fdffffcfb1
pc 0x13f744, sp 0x7fdffffd081
pc 0x142e68, sp 0x7fdffffd161
pc 0x1431b4, sp 0x7fdffffd371
pc 0x14418c, sp 0x7fdffffd581
pc 0x1443e0, sp 0x7fdffffd651
pc 0x143d48, sp 0x7fdffffd711
pc 0x129be0, sp 0x7fdffffd7d1
pc 0x12678c, sp 0x7fdffffd941
pc 0x15eed0, sp 0x7fdffffda11
pc 0x11bc5c, sp 0x7fdffffdae1
pc 0x118c68, sp 0x7fdffffdbf1
pc 0x118d60, sp 0x7fdffffdcb1
pc 0x118a2c, sp 0x7fdffffdd71
pc 0x116a58, sp 0x7fdffffde41
pc 0x115ee0, sp 0x7fdffffdf21
pc 0x402a4c34, sp 0x7fdffffdfe1
done


2nd backtrace:

Memory modified after free 0xfffff800d02aa800(504) val=deadc0dd @
0xfffff800d02a
a920
panic: Most recently used by file desc

cpuid = 0
KDB: stack backtrace:
mtrash_ctor() at mtrash_ctor+0x7c
uma_zalloc_arg() at uma_zalloc_arg+0x3e8
malloc() at malloc+0xa8
fdinit() at fdinit+0x40
fdcopy() at fdcopy+0x28
fork1() at fork1+0x768
vfork() at vfork+0x18
syscall() at syscall+0x220
- -- syscall (66, FreeBSD ELF64, vfork) %o7=0x102210 --
userland() at 0x123168
user trace: trap %o7=0x102210
pc 0x123168, sp 0x7fdffffcf21
pc 0x117b4c, sp 0x7fdffffd011
pc 0x117af8, sp 0x7fdffffd0d1
pc 0x1025f4, sp 0x7fdffffd191
pc 0x102954, sp 0x7fdffffd271
pc 0x10b438, sp 0x7fdffffd331
pc 0x1001f0, sp 0x7fdffffe0c1
pc 0, sp 0x7fdffffe181
done


Hoping they are useful for someone,


Hannes Mehnert
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (FreeBSD)

iD8DBQFB/ndTRcuNlziBjRwRAutYAJ0dCXp/SLSdCI8dsyEH2YYI+xallACfcQaF
ZrMVFWHR2v0ZE0itv78P8h0=
=tmjA
-----END PGP SIGNATURE-----



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050131182213.GC63301>