[Bug 208140] panic: page fault in pf

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=208140

--- Comment #12 from Roman <rkondakov at ya.ru> ---
new crash:

panic: page fault

---
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "amd64-marcel-freebsd"...

Unread portion of the kernel message buffer:
panic: page fault
cpuid = 0
KDB: stack backtrace:
#0 0xffffffff80444e10 at kdb_backtrace+0x60
#1 0xffffffff8040b306 at vpanic+0x126
#2 0xffffffff8040b1d3 at panic+0x43
#3 0xffffffff8066ddab at trap_fatal+0x36b
#4 0xffffffff8066e0ad at trap_pfault+0x2ed
#5 0xffffffff8066d72a at trap+0x47a
#6 0xffffffff80653892 at calltrap+0x8
#7 0xffffffff805b5fc6 at pf_test+0xd66
#8 0xffffffff805c5ced at pf_check_in+0x1d
#9 0xffffffff804d94d4 at pfil_run_hooks+0x84
#10 0xffffffff804f543d at ip_input+0x31d
#11 0xffffffff804d8672 at netisr_dispatch_src+0x62
#12 0xffffffff804d13a6 at ether_demux+0x126
#13 0xffffffff804d204e at ether_nh_input+0x35e
#14 0xffffffff804d8672 at netisr_dispatch_src+0x62
#15 0xffffffff804d1311 at ether_demux+0x91
#16 0xffffffff804d204e at ether_nh_input+0x35e
#17 0xffffffff804d8672 at netisr_dispatch_src+0x62

---

bt:

#0  doadump (textdump=<value optimized out>) at pcpu.h:219
#1  0xffffffff8040af62 in kern_reboot (howto=260)
    at /usr/src/sys/kern/kern_shutdown.c:486
#2  0xffffffff8040b345 in vpanic (fmt=<value optimized out>,
    ap=<value optimized out>) at /usr/src/sys/kern/kern_shutdown.c:889
#3  0xffffffff8040b1d3 in panic (fmt=0x0)
    at /usr/src/sys/kern/kern_shutdown.c:818
#4  0xffffffff8066ddab in trap_fatal (frame=<value optimized out>,
    eva=<value optimized out>) at /usr/src/sys/amd64/amd64/trap.c:858
#5  0xffffffff8066e0ad in trap_pfault (frame=0xfffffe00003cf480,
    usermode=<value optimized out>) at /usr/src/sys/amd64/amd64/trap.c:681
#6  0xffffffff8066d72a in trap (frame=0xfffffe00003cf480)
    at /usr/src/sys/amd64/amd64/trap.c:447
#7  0xffffffff80653892 in calltrap ()
    at /usr/src/sys/amd64/amd64/exception.S:236
#8  0xffffffff805dbd06 in pfr_update_stats (kt=<value optimized out>, a=0x10,
    af=<value optimized out>, len=74, dir_out=0, op_pass=1, notrule=0)
    at /usr/src/sys/netpfil/pf/pf_table.c:1962
#9  0xffffffff805b5fc6 in pf_test (dir=1, ifp=<value optimized out>,
    m0=0xfffffe00003cf798, inp=<value optimized out>)
    at /usr/src/sys/netpfil/pf/pf.c:6105
#10 0xffffffff805c5ced in pf_check_in (arg=<value optimized out>,
    m=0xfffffe00003cf798, ifp=0x10, dir=<value optimized out>, inp=0x0)
    at /usr/src/sys/netpfil/pf/pf_ioctl.c:3551
#11 0xffffffff804d94d4 in pfil_run_hooks (ph=0xffffffff80b1e158,
    mp=0xfffffe00003cf820, ifp=0xfffff80006c16000, dir=1, inp=0x0)
    at /usr/src/sys/net/pfil.c:82

---
#8  0xffffffff805dbd06 in pfr_update_stats (kt=<value optimized out>, a=0x10,
    af=<value optimized out>, len=74, dir_out=0, op_pass=1, notrule=0)
    at /usr/src/sys/netpfil/pf/pf_table.c:1962
1962                    sin.sin_family = AF_INET;
(kgdb) p sin
$1 = {sin_len = 16 '\020', sin_family = 2 '\002', sin_port = 0, sin_addr = {
    s_addr = 0}, sin_zero = "\000\000\000\000\000\000\000"}

#9  0xffffffff805b5fc6 in pf_test (dir=1, ifp=<value optimized out>,
    m0=0xfffffe00003cf798, inp=<value optimized out>)
    at /usr/src/sys/netpfil/pf/pf.c:6105
(kgdb) l
6100                                &s->key[(s->direction == PF_IN)]->
6101                                    addr[(s->direction == PF_OUT)],
6102                                pd.af, pd.tot_len, dir == PF_OUT,
6103                                r->action == PF_PASS, tr->src.neg);
6104                    if (tr->dst.addr.type == PF_ADDR_TABLE)
6105                            pfr_update_stats(tr->dst.addr.p.tbl,
6106                                (s == NULL) ? pd.dst :
6107                                &s->key[(s->direction == PF_IN)]->
6108                                    addr[(s->direction == PF_IN)],
6109                                pd.af, pd.tot_len, dir == PF_OUT,
p tr->dst.addr.p.tbl
Cannot access memory at address 0x68
(kgdb) p tr
$4 = <value optimized out>
(kgdb) p tr->dst
Cannot access memory at address 0x39
(kgdb) p tr->dst.addr
Cannot access memory at address 0x39
(kgdb) p tr->dst.addr.p
Cannot access memory at address 0x59
(kgdb) p tr->dst.addr.p.tbl
Cannot access memory at address 0x59

... 

p *tr - worked
p tr->dst.addr.p.tbl - worked after p *tr

-- 
You are receiving this mail because:
You are on the CC list for the bug.