Re: fixes for ipfw and pf lock ordering issues

From: Christian S.J. Peron (csjp_at_freebsd.org)
Date: 09/28/04

  • Next message: Jerry Toung: "Re: remote debugging question"
    Date: Tue, 28 Sep 2004 20:59:20 +0000
    To: Wiktor Niesiobedzki <bsd@w.evip.pl>
    
    

    On 28 Sep 2004 Wiktor Niesiobedzki wrote:
    > pf_socket_lookup(cbb24958,cbb2495c,2,cbb24a0c,c15275a0) at
    > pf_socket_lookup+0x22
    > pf_test_tcp(cbb249c0,cbb249bc,2,c14d6200,c139e500) at pf_test_tcp+0x648
    > pf_test(2,c14b8014,cbb24aa8,c15275a0,c15661c0) at pf_test+0x53d
    > pf_check_out(0,cbb24aa8,c14b8014,2,c15275a0) at pf_check_out+0x6d
    > pfil_run_hooks(c066da00,cbb24b1c,c14b8014,2,c15275a0) at pfil_run_hooks+0xeb
    > ip_output(c139e500,0,cbb24ae8,0,0) at ip_output+0x630
    > tcp_twrespond(c18709a0,10,c0607304,69c,1) at tcp_twrespond+0x1ed
    > tcp_twstart(c186b380,0,c0606ba2,96f,0) at tcp_twstart+0x1d3
    > tcp_input(c139d800,14,c14b8014,1,0) at tcp_input+0x2c39
    > ip_input(c139d800,0,c06053ae,e7,c066d098) at ip_input+0x5b0
    > netisr_processqueue(c066d098,c0642940,1,c05fb4da,c10d62c0) at
    > netisr_processqueu
    > e+0x8e
    > swi_net(0,0,c05f9b18,269,0) at swi_net+0xe9
    > ithread_loop(c10de480,cbb24d48,c05f990f,31f,1000000) at ithread_loop+0x172
    > fork_exit(c04a6520,c10de480,cbb24d48) at fork_exit+0xc6
    > fork_trampoline() at fork_trampoline+0x8
    > --- trap 0x1, eip = 0, esp = 0xcbb24d7c, ebp = 0 ---
    > db>
    >
    > db> show locks
    > exclusive sleep mutex inp (tcpinp) r = 0 (0xc1527630) locked @
    > /usr/src/sys/neti
    > net/tcp_input.c:737
    > exclusive sleep mutex tcp r = 0 (0xc066de6c) locked @
    > /usr/src/sys/netinet/tcp_i
    > nput.c:611
    > db>
    >
    > (gdb) l *pf_socket_lookup+0x22
    > 0xc043a2d2 is in pf_socket_lookup (/usr/src/sys/contrib/pf/net/pf.c:2414).
    > 2409 #endif
    > 2410 struct inpcb *inp;
    > 2411
    > 2412 #ifdef __FreeBSD__
    > 2413 if (inp_arg != NULL) {
    > 2414 *uid = inp_arg->inp_socket->so_cred->cr_uid;
    > 2415 *gid = inp_arg->inp_socket->so_cred->cr_groups[0];
    > 2416 return (1);
    > 2417 }
    > 2418 #endif
    >

    Looks like it could be a bad pointer dereference, have you recompiled
    your kernel and the pf/ipfw modules? If not, please try recompiling
    your kernel. otherwise I will keep hunting for potentially bad
    pointers being passed to the pfil hooks

    -- 
    Christian S.J. Peron
    csjp@FreeBSD.ORG
    FreeBSD Committer
    _______________________________________________
    freebsd-hackers@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
    To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"
    

  • Next message: Jerry Toung: "Re: remote debugging question"

    Relevant Pages

    • Re: 2.6.31-rc3 cpufreq bug (null pointer dereference)
      ... unable to handle kernel NULL pointer dereference at ... So we have a repeatable kernel-crashing post-2.6.30 regression. ... Fix NULL pointer dereference regression in conservative gov ... CPU that is not yet managed by conservative governor. ...
      (Linux-Kernel)
    • Re: Still BIG problems with XFree on Dell C400
      ... as I have a Dell C600 Latitude with X happily humming along. ... Debian is slow on official updates, I had big problems with installing ... Anyway, I downloaded kernel 2.4.20, and recompiled it, and after ... recompiling the kernel. ...
      (Debian-User)
    • [Bug 1338] New: 2.6.0-test7 oops in proc_pid_stat
      ... Unable to handle kernel NULL pointer dereference at virtual address 0000003c ... CPU: 0 ...
      (Linux-Kernel)
    • Re: NFS causing oops when freeing namespace
      ... unable to handle kernel NULL pointer dereference at virtual address ... is reaped and released, setting sighand to NULL. ... to kthread conversion before I finished the pid namespace. ...
      (Linux-Kernel)
    • Re: ide-cd doesnt replace ide-scsi?
      ... Unable to handle kernel NULL pointer dereference at 0000000000000410 RIP: ... serial_core parport_pc parport floppy radeonfb snd_via82xx gameport ...
      (Linux-Kernel)