Skip site navigation (1)Skip section navigation (2) 
Date:      Fri, 27 Sep 2019 15:48:50 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 240837] crash with 12.1-BETA1
Message-ID:  <bug-240837-227-yoVfmGtRbA@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-240837-227@https.bugs.freebsd.org/bugzilla/>
References:  <bug-240837-227@https.bugs.freebsd.org/bugzilla/>
index | next in thread | previous in thread | raw e-mail 

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=240837

Michael Tuexen <tuexen@freebsd.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Assignee|bugs@FreeBSD.org            |tuexen@freebsd.org
             Status|New                         |In Progress

--- Comment #3 from Michael Tuexen <tuexen@freebsd.org> ---
The problem was fixed for head in
https://svnweb.freebsd.org/changeset/base/352386
, which was MFCed to stable/12 in
https://svnweb.freebsd.org/changeset/base/352508. I missed to MFS the fix to
releng.12.1, which was branched at r352480.

What happened is that overflowing the sackblks[] changed sackhint.nexthole to
an invalid value which was not NULL. From the core provided:

  sackblks = {{
      start = 0xc1f54a52, 
      end = 0xc1f54ffe
    }, {
      start = 0xc1f5229e, 
      end = 0xc1f5284a
    }, {
      start = 0xc1f5229e, 
      end = 0xc1f5284a
    }, {
      start = 0xc1f5229e, 
      end = 0xc1f5284a
    }, {
      start = 0xc1f5229e, 
      end = 0xc1f5284a
    }, {
      start = 0xc1f51746, 
      end = 0xc1f51cf2
    }}, 
  sackhint = {
    nexthole = 0xc1f5119ac1f50bee, 
    sack_bytes_rexmit = 0x0, 
    last_sack_ack = 0x3fe9f863, 
    ispare = 0x0, 
    sacked_bytes = 0xb65, 
    _pad1 = {0x0}, 
    _pad = {0x0}
  },

Since I can't get any changes in BETA2 anymore, the fix will be in BETA3 or
RC1.

-- 
You are receiving this mail because:
You are the assignee for the bug.
help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-240837-227-yoVfmGtRbA>