From owner-freebsd-net@FreeBSD.ORG Fri Oct 31 13:34:11 2008 Return-Path: Delivered-To: freebsd-net@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 470171065674; Fri, 31 Oct 2008 13:34:11 +0000 (UTC) (envelope-from kirma@cs.hut.fi) Received: from hutcs.cs.hut.fi (hutcs.cs.hut.fi [130.233.192.7]) by mx1.freebsd.org (Postfix) with ESMTP id 024AB8FC19; Fri, 31 Oct 2008 13:34:10 +0000 (UTC) (envelope-from kirma@cs.hut.fi) Received: from kirma (helo=localhost) by hutcs.cs.hut.fi with local-esmtp (Exim 4.54) id 1Kvtt2-0005q4-3s; Fri, 31 Oct 2008 15:18:00 +0200 Date: Fri, 31 Oct 2008 15:17:59 +0200 (EET) From: Jari Kirma To: rwatson@FreeBSD.org In-Reply-To: <200810311254.m9VCsbPq064275@freefall.freebsd.org> Message-ID: References: <200810311254.m9VCsbPq064275@freefall.freebsd.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-Spam-Checker: TKK/TKO/hutcs/SpamAssassin X-Spam-Level: X-Spam-Score: -999 X-Spam-Status: No, score=-100.0, required=5.0, version=3.2.4-tko20080701, tests=NO_RELAYS,RCVD_PATH_INSIDE_HUT Cc: freebsd-net@FreeBSD.org Subject: Re: kern/122082: [in_pcb] NULL pointer dereference in in_pcbdrop X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 31 Oct 2008 13:34:11 -0000 On Fri, 31 Oct 2008, rwatson@FreeBSD.org wrote: > Synopsis: [in_pcb] NULL pointer dereference in in_pcbdrop > > State-Changed-From-To: open->feedback > State-Changed-By: rwatson > State-Changed-When: Fri Oct 31 12:52:03 UTC 2008 > State-Changed-Why: > Could I ask you to confirm whether this still occurs with the most recent > 7-STABLE? If so, could I then ask you to print *tw and *inp in the > tcp_twclose frame, which might shed a bit more light on things. > > Thanks! Unfortunately I don't have this kind of spare machine to risk crashing, although I try to look at it again. Still, if I remember correctly, the system was agitated to crash very often (like over 25% of time after bootup in some 15 first minutes): linux-opera (or even linux-firefox) being used actively on a quad-core machine running relatively regular xfce desktop. When the system survived first fifteen minutes or so, it seemed to get less and less likely it would crash similarly, although it could have happened weeks after that with very similar signs: crashing a moment after browsing around, as if remote teardown of a persistent HTTP TCP socket from the remote end would trigger it. I think the Linux emulation part in this context is somehow significant. When I moved to native Firefox instead, at least similar crashes ceased to occur. Might there be some locks not being held on Linux call path in comparison to native versions? > Responsible-Changed-From-To: freebsd-net->rwatson > Responsible-Changed-By: rwatson > Responsible-Changed-When: Fri Oct 31 12:52:03 UTC 2008 > Responsible-Changed-Why: > Could I ask you to confirm whether this still occurs with the most recent > 7-STABLE? If so, could I then ask you to print *tw and *inp in the > tcp_twclose frame, which might shed a bit more light on things. > > Thanks! > > > http://www.freebsd.org/cgi/query-pr.cgi?pr=122082 >