kern/145211: Memory modified after free

[Nathaniel W Filardo]

The following reply was made to PR sparc64/145211; it has been noted by GNATS.

From: Nathaniel W Filardo <nwf at cs.jhu.edu>
To: Marius Strobl <marius at alchemy.franken.de>
Cc: bug-followup at freebsd.org
Subject: Re: kern/145211: Memory modified after free
Date: Thu, 1 Apr 2010 11:52:48 -0400

 --z20Z95FJiBb6FirT
 Content-Type: text/plain; charset=us-ascii
 Content-Disposition: inline
 
 On Thu, Apr 01, 2010 at 01:23:59PM +0200, Marius Strobl wrote:
 > This is the IOMMU reporting an error as STX_PCI_CTRL_MMU_ERR is set in
 > the PCI CSR and TOM_PCI_IOMMU_ERR is set in the IOMMO CSR. Moreover the
 > TOM_PCI_IOMMU_INVALID_ERR set in the latter suggests that a DMA buffer
 > was used after it had been unloaded (and thus the TTE invalidated). So
 > it's quite likely that both the UMA and the IOMMU complaints are caused
 > by the same problem. Unfortunately, neither allows to identify the
 
 Thank you for decoding that for me.
 
 > culprit. If you could move the traffic in question from bge2 to bge1
 > and either use r206020 or the following patch that should allow to
 > identify at least the driver involved, i.e. ata(4) or bge(4), by
 > additionally indicating whether pcib0 or pcib3 triggered the panic.
 > http://people.freebsd.org/~marius/psycho_schizo_device_get_nameunit.diff
 
 Just csup'd and am now rebuilding; will let you know.
 
 > Which version of if_bge.c were you running when the panic occurred?
 
 $FreeBSD: src/sys/dev/bge/if_bge.c,v 1.284 2010/03/25 17:17:35 yongari Exp $
 
 --z20Z95FJiBb6FirT
 Content-Type: application/pgp-signature
 Content-Disposition: inline
 
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1.4.9 (GNU/Linux)
 
 iEYEARECAAYFAku0wVAACgkQTeQabvr9Tc9jgQCeNIHaRTCWFvsZyxIwvS7kqTVY
 /XoAniK2Qq/z7NdJK9NrfNN/d+w+//dq
 =TzYn
 -----END PGP SIGNATURE-----
 
 --z20Z95FJiBb6FirT--