kern/128917: [wpi] [panic] if_wpi and wpa+tkip causing kernel panic

[Marc Peters]

The following reply was made to PR kern/128917; it has been noted by GNATS.

From: Marc Peters <marc at sanity.de>
To: bug-followup at FreeBSD.org, kitambi at epicsol.org
Cc:  
Subject: Re: kern/128917: [wpi] [panic] if_wpi and wpa+tkip causing kernel
 panic
Date: Fri, 16 Jan 2009 13:34:29 +0100

 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA1
 
 I am hitting this too on a network with an airport extreme access point
 when it uses "WPA/WPA2". With these Security Setting Apple just uses
 TKIP and trying to force FreeBSD to use AES-CCMP in
 /etc/wpa_supplicant.conf doesn't work, e.g. wpi cannot connect to the
 network. Using only WPA2 on this access point will provide AES and no
 more panics.
 
 here is some additional information as suggested on the STABLE-ML:
 
 from a textdump:
 
 msgbuf.txt:
 [snipping dmesg and startup-messages]
 Fatal trap 12: page fault while in kernel mode
 cpuid = 1; apic id = 01
 fault virtual address	= 0xffff
 fault code		= supervisor read, page not present
 instruction pointer	= 0x20:0xc0e70dfc
 stack pointer	        = 0x28:0xe58bbbe0
 frame pointer	        = 0x28:0xe58bbc9c
 code segment		= base 0x0, limit 0xfffff, type 0x1b
 			= DPL 0, pres 1, def32 1, gran 1
 processor eflags	= interrupt enabled, resume, IOPL = 0
 current process		= 25 (wpi0 taskq)
 
 
 ddb.txt (just bt output here):
 
 db> bt
 
 Tracing pid 25 tid 100024 td 0xc5189af0
 wpi_ops(c52c5000,1,c0b7cf36,0,0,...) at wpi_ops+0x89c
 taskqueue_run(c52ab200,c52ab21c,0,c0b7cf36,0,...) at taskqueue_run+0x175
 taskqueue_thread_loop(c52c69b4,e58bbd38,0,0,0,...) at
 taskqueue_thread_loop+0xbb
 fork_exit(c07fb2b0,c52c69b4,e58bbd38) at fork_exit+0x99
 fork_trampoline() at fork_trampoline+0x8
 - --- trap 0, eip = 0, esp = 0xe58bbd70, ebp = 0 ---
 
 
 version.txt:
 FreeBSD 7.1-STABLE #0: Thu Jan 15 13:51:12 CET 2009
     root at lappi.agentur.local:/usr/obj/usr/src/sys/DEBUG_DRM
 
 gdb
 gdb> file /boot/YOUR_KERNEL/if_wpi.ko
 
 Reading symbols from /boot/kernel/if_wpi.ko...Reading symbols from
 /boot/kernel/if_wpi.ko.symbols...done.
 
 gdb> l *wpi_ops+0x89c
 
 0x9dfc is in wpi_ops (/usr/src/sys/modules/wpi/../../dev/wpi/if_wpi.c:2411).
 2406		/* update adapter's configuration */
 2407		sc->config.associd = 0;
 2408		sc->config.filter &= ~htole32(WPI_FILTER_BSS);
 2409		IEEE80211_ADDR_COPY(sc->config.bssid, ni->ni_bssid);
 2410		sc->config.chan = ieee80211_chan2ieee(ic, ni->ni_chan);
 2411		if (IEEE80211_IS_CHAN_2GHZ(ni->ni_chan)) {
 2412			sc->config.flags |= htole32(WPI_CONFIG_AUTO |
 2413			    WPI_CONFIG_24GHZ);
 2414		}
 2415		switch (ic->ic_curmode) {
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.10 (FreeBSD)
 
 iEYEARECAAYFAklwftUACgkQCnBgS+kUGEtEDwCeLB9z3ynmx9yyXcl3+DTJqTyk
 5XQAnRY2PTpFlWrF+5bQqN7ygkV9tMch
 =XAks
 -----END PGP SIGNATURE-----