1.3.64 dies in tcp_recvmsg

Jon Tombs (jon@gte.esi.us.es)
Thu, 15 Feb 1996 21:12:09 +0100 (MET)


1.3.64 crashed on me shortly after starting a remote xterm with:

Unable to handle kernel NULL pointer dereference at virtual address c0000004
current->tss.cr3 = 00a04000,
*pde = 00102067
*pte = 00000027
Oops: 0002
CPU: 0
EIP: 0010:[<00144f2a>]
EFLAGS: 00013206
eax: 00b1ce94 ebx: 00763d30 ecx: 00b1ce18 edx: 00000000
esi: 000000e4 edi: 00a06f7c ebp: 00b1cdfc esp: 00a06eec
ds: 0018 es: 0018 fs: 002b gs: 002b ss: 0018
Process X (pid: 137, process nr: 18, stackpage=00a06000)
Stack: 00b1cdfc 00a06f80 00000000 00000800 00000000 00b1ce18 00000000 000006d0
00c0a810 00a06f0c 3f422559 0014f496 00b1cdfc 00a06f7c 00000930 00000800
00000000 00a06f80 00001000 00837000 083f8008 00837084 0013667b 00837084
Call Trace: [<0014f496>] [<0013667b>] [<00121d2c>] [<0010a539>]
Code: 89 42 04 8b 42 04 89 10 6a 01 53 89 4c 24 1c e8 02 3e ff ff

I can't get ksymoops to do anything other than core dump, so from
the System.map

00144a80 t cleanup_rbuf
00144ba0 t tcp_recvmsg
^^^^^^^^^^^ in here
00145040 t tcp_close_state
00145160 T tcp_shutdown
00145200 t tcp_close
00145350 t tcp_accept
00145420 t tcp_connect
00145890 T tcp_setsockopt

It would seem that tcp_recvmsg was called from sock_write.

00136450 T socki_lookup
00136460 T sock_alloc
00136520 T sock_release
001365c0 t sock_lseek
001365d0 t sock_read
001366a0 t sock_write
00136760 t sock_ioctl
00136790 t sock_select
001367d0 t sock_close
00136800 t sock_fasync

--
Jon <jon@gte.esi.us.es, http://www.esi.us.es/~jon>