Re: [PATCH] anobjrmap 1/6 objrmap

From: Andrea Arcangeli (andrea_at_suse.de)
Date: 03/20/04

  • Next message: Bartlomiej Zolnierkiewicz: "Re: [PATCH] barrier patch set"
    Date:	Sat, 20 Mar 2004 17:55:00 +0100
    To: "Martin J. Bligh" <mbligh@aracnet.com>
    
    

    On Sat, Mar 20, 2004 at 08:40:27AM -0800, Martin J. Bligh wrote:
    > OK, first I did the whole of -aa2, it boots OK, but panics as soon as I try
    > to connect with ssh. I'll try the broken out bits next.
    >
    > M.
    >
    > Unable to handle kernel NULL pointer dereference at virtual address 00000003
    > printing eip:
    > c013f504
    > *pde = 2e820001
    > *pte = 00000000
    > Oops: 0000 [#1]
    > SMP
    > CPU: 15
    > EIP: 0060:[<c013f504>] Not tainted
    > EFLAGS: 00010292 (2.6.5-rc1-aa2)
    > EIP is at do_no_page+0xc4/0x45c
    > eax: 00000000 ebx: 00000000 ecx: 00000000 edx: 00000000
    > esi: ee5eea60 edi: ee5a3ec8 ebp: ee9c52a0 esp: ee5a3e94
    > ds: 007b es: 007b ss: 0068
    > Process sshd (pid: 19069, threadinfo=ee5a2000 task=ee69a870)
    > Stack: 00000000 eeb43340 00000001 ee9c52a0 c3ba2820 00000000 40268000 ee5a3ec8
    > ee9c52a0 ee69a870 ee5eea60 00000000 ef6a6134 00000001 c013fa0f ee9c52a0
    > ee5eea60 40268000 00000001 eeb43340 eeea8008 ee9c52a0 ee69a870 ee5eea60
    > Call Trace:
    > [<c013fa0f>] handle_mm_fault+0xc7/0x190
    > [<c0114fc3>] do_page_fault+0x13b/0x540
    > [<c0114e88>] do_page_fault+0x0/0x540
    > [<c0140feb>] do_mmap_pgoff+0x4b7/0x5fc
    > [<c010d24b>] sys_mmap2+0x67/0x98
    > [<c01075f9>] error_code+0x2d/0x38
    >
    > Code: 0f b6 41 03 8b 14 85 80 a9 35 c0 89 c8 2b 82 84 0b 00 00 69

    this looks strange:

    Code; c013f504 <filp_open+24/70>
    00000000 <_EIP>:
    Code; c013f504 <filp_open+24/70> <=====
       0: 0f b6 41 03 movzbl 0x3(%ecx),%eax <=====
    Code; c013f508 <filp_open+28/70>
       4: 8b 14 85 80 a9 35 c0 mov 0xc035a980(,%eax,4),%edx
    Code; c013f50f <filp_open+2f/70>
       b: 89 c8 mov %ecx,%eax
    Code; c013f511 <filp_open+31/70>
       d: 2b 82 84 0b 00 00 sub 0xb84(%edx),%eax
    Code; c013f517 <filp_open+37/70>
      13: 69 00 00 00 00 00 imul $0x0,(%eax),%eax

    %ecx is zero, not sure what can actually look at a 3 byte offset in
    do_no_page (infact it looks like it was miscompiled), can you send me
    your vmlinux privately (or just the the whole assembler for do_no_page)?

    looking at my vmlinux asm (do_no_page C source is the same for both of
    us) there's not a single movzbl instruction in the whole function and
    I can't see any dereference at 0x3 offset either, nor I can see what
    could generate that from the C code.

    my compiler is:

    Reading specs from /usr/lib/gcc-lib/i586-suse-linux/3.3.1/specs
    Configured with: ../configure --enable-threads=posix --prefix=/usr
    --with-local-prefix=/usr/local --infodir=/usr/share/info
    --mandir=/usr/share/man --libdir=/usr/lib
    --enable-languages=c,c++,f77,objc,java,ada --disable-checking
    --enable-libgcj --with-gxx-include-dir=/usr/include/g++
    --with-slibdir=/lib --with-system-zlib --enable-shared
    --enable-__cxa_atexit i586-suse-linux
    Thread model: posix
    gcc version 3.3.1 (SuSE Linux)

    can you give a try with that one just in case? I made further use of
    explicit regparm, old compiler miscompiles regparm.
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/


  • Next message: Bartlomiej Zolnierkiewicz: "Re: [PATCH] barrier patch set"

    Relevant Pages

    • Re: [BK PATCHES] ide-2.6 update
      ... The first 'grep' line of the patch is found at an offset of about +180 ... What src tree is this to be applied to? ... Copyright 2004 by Maurice Eugene Heskett, ... send the line "unsubscribe linux-kernel" in ...
      (Linux-Kernel)
    • Re: Linux v2.6.14-rc4
      ... lib/iomap.c versions assume that PIO space needs different low-level ... primitives for access and can be shifted outside of iomem space. ... There we have ioport_mapadd offset to port number and io... ... send the line "unsubscribe linux-kernel" in ...
      (Linux-Kernel)
    • Re: [BUG] 2.6.3 Slab corruption: errors are triggered when memory exceeds 2.5GB (correction)
      ... Also I am quite confident that it is not a hardware problem. ... On Tue, 24 Feb 2004, Manfred Spraul wrote: ... > same offset into the object, ... send the line "unsubscribe linux-kernel" in ...
      (Linux-Kernel)
    • Re: Infinite interrupt loop, INTSTAT = 0
      ... be possible to change the operating parameters of the system so it no ... The first thing to try here is to bring the offset down to 63 like all ... If that doesn't fix it, the next steps will be to begin lowering the ... send the line "unsubscribe linux-kernel" in ...
      (Linux-Kernel)
    • Re: Bizarre oops after suspend to RAM (was: Re: [ACPI] Resume from Suspend to RAM)
      ... > Whoops. ... May have been a bit too hasty there. ... NULL pointer dereference in filp_open; ... send the line "unsubscribe linux-kernel" in ...
      (Linux-Kernel)