1.3.64, kfree of non-kmalloced memory:

joost witteveen (joost@rulcmc.leidenuniv.nl)
Sat, 17 Feb 1996 22:11:13 +0100 (MET)

Well, I didn't know 1.3.65 was out already, so I was running
1.3.64, with X, emacs, and xv displaying on another terminal
(via an ethernet link (3c503)).
Suddenly, xv was killed, and I saw the following in my messages:

Feb 17 21:43:03 rulcmc kernel: kfree of non-kmalloced memory: 00875ed4, next= 00009000, order=3
Feb 17 21:43:03 rulcmc kernel: general protection: 0000
Feb 17 21:43:03 rulcmc kernel: CPU: 0
Feb 17 21:43:03 rulcmc kernel: EIP: 0010:[<00141c25>]
Feb 17 21:43:03 rulcmc kernel: EFLAGS: 00010202
Feb 17 21:43:03 rulcmc kernel: eax: 87f000fe ebx: 54f00000 ecx: 00140000 edx: 00000001
Feb 17 21:43:03 rulcmc kernel: esi: fdf000e9 edi: 00000001 ebp: 00000014 esp: 007a2da0
Feb 17 21:43:03 rulcmc kernel: ds: 0018 es: 0018 fs: 002b gs: 002b ss: 0018
Feb 17 21:43:03 rulcmc kernel: Process xv (pid: 5333, process nr: 50, stackpage=007a2000)
Feb 17 21:43:03 rulcmc kernel: Stack: 003f8dfc 003f8e60 00875a40 00000014 00000002 fdf000e9 431d1cd8 00000001
Feb 17 21:43:03 rulcmc kernel: 003f0000 00875a40 00000014 00134405 00000001 87f000fe 00000051 fdf000ef
Feb 17 21:43:03 rulcmc kernel: 00000000 1ef00000 00000001 00000000 003f8dfc 00875a24 001422d5 003f8dfc
Feb 17 21:43:03 rulcmc kernel: Call Trace: [<00134405>] [<001422d5>] [<00134405>] [<0013e48d>] [<00134746>] [<0013c4
bc>] [<001413f0>]
Feb 17 21:43:03 rulcmc kernel: [<001494d9>] [<001326e2>] [<0011fbd3>] [<00115bc2>] [<0010a2dd>] [<0010a359>]
Feb 17 21:43:03 rulcmc kernel: Code: 8a 43 41 84 c0 0f 85 ac 06 00 00 8a 83 fd 00 00 00 3c 07 0f

>>EIP: 141c25 <tcp_rcv+1e5/8dc>
Trace: 134405 <release_sock+79/c4>
Trace: 1422d5 <tcp_rcv+895/8dc>
Trace: 134405 <release_sock+79/c4>
Trace: 13e48d <tcp_sendmsg+2f5/d94>
Trace: 134746 <kfree_skbmem+4a/5c>
Trace: 13c4

Code: 141c25 <tcp_rcv+1e5/8dc> movb 0x41(%ebx),%al
Code: 141c28 <tcp_rcv+1e8/8dc> testb %al,%al
Code: 141c2a <tcp_rcv+1ea/8dc> jne 1422dc <tcp_rcv+89c/8dc>
Code: 141c30 <tcp_rcv+1f0/8dc> movb 0xfd(%ebx),%al
Code: 141c36 <tcp_rcv+1f6/8dc> cmpb $0x7,%al

Still running 1.3.64,

joost witteveen
joost@rulcmc.leidenuniv.nl
joostje@dds.hacktic.nl