From owner-freebsd-hackers  Fri Jun  6 11:25:36 1997
Return-Path: <owner-hackers>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id LAA03232
          for hackers-outgoing; Fri, 6 Jun 1997 11:25:36 -0700 (PDT)
Received: from server.netplus.com.br ([200.247.23.97])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id LAA03226
          for <freebsd-hackers@freebsd.org>; Fri, 6 Jun 1997 11:25:31 -0700 (PDT)
Received: from sergio.lenzi (root@dial09.netplus.com.br [200.247.23.108]) by server.netplus.com.br (8.7.6/8.7.3) with ESMTP id PAA21977 for <freebsd-hackers@freebsd.org>; Fri, 6 Jun 1997 15:16:59 GMT
Received: (from lenzi@localhost) by sergio.lenzi (8.8.5/8.8.3) id PAA00373; Fri, 6 Jun 1997 15:28:47 GMT
Date: Fri, 6 Jun 1997 15:28:46 +0000 ()
From: "Lenzi, Sergio" <lenzi@bsi.com.br>
X-Sender: lenzi@sergio
To: freebsd-hackers@freebsd.org
Subject: pppd problem when using natd (cont.).
Message-ID: <Pine.BSF.3.91.970606152339.341A-100000@sergio>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-hackers@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk


The panic on module ppp seems to be in pppfcs call.

The system panics while using natd (network address translator) and pppd


(line 570 of file /usr/src/sys/net/ppp_tty.c).

It arises when ppp_fcs receive a len  less than zero.

static u_short
pppfcs(fcs, cp, len)
    register u_short fcs;
    register u_char *cp;
    register int len;
{
    while (len--)
	fcs = PPP_FCS(fcs, *cp++);
    return (fcs);
}

Can someone please guide me what to do if this function receives 
len < 0 ???

In a test with a printf... it receives len = -17.

Thanks for any help.


Sergio Lenzi.

Unix consult.