2.0.21 bootpd/arp related crash

Steven Dick (ssd@mmae.engr.ucf.edu)
Tue, 1 Oct 96 00:21 EDT

This Oops was triggered by bootpd in NetKit-B-0.06-13.i386.rpm.
Upgrading to a newer bootpd seems to have fixed it.
This looks like it might be another case of invalid args to a syscall,
but that's just my uneducated guess.

Red Hat Linux release 3.0.3 (Picasso)
Kernel 2.0.21 on a i386

Unable to handle kernel NULL pointer dereference at virtual address c0000040
current->tss.cr3 = 00322000, Hr3 = 00322000
*pde = 00102067
*pte = 00000027
Oops: 0000
CPU: 0
EIP: 0010:[<001468d9>]
EFLAGS: 00010206
eax: 00000003 ebx: 00000000 ecx: 002d0f30 edx: 00000002
esi: 00000000 edi: 002d0f30 ebp: 00000000 esp: 002d0eec
ds: 0018 es: 0018 fs: 002b gs: 002b ss: 0018
Process bootpd (pid: 109, process nr: 16, stackpage=002d0000)
Stack: 00000000 bffff908 002d0f74 002d0f30 00000006 00008952 001bd5e8 ffffffff
00146dfc 00146f82 002d0f30 00000000 bffff8d4 00355808 00000006 bffff8a4
00000000 00000002 00000000 00000000 00000000 40000000 b9b41b05 00000000
Call Trace: [<00146dfc>] [<00146f82>] [<00149257>] [<00132d82>] [<0012a272>] [<0010a6a2>]
Code: 66 83 7e 40 17 75 b3 83 7c 24 2c 00 0f 85 8e 00 00 00 ff 05
Using `map.2.0.21' to map addresses to symbols.

>>EIP: 1468d9 <arp_req_set+7d/2d0>
Trace: 146dfc <arp_ioctl+c0/328>
Trace: 146f82 <arp_ioctl+246/328>
Trace: 149257 <inet_ioctl+2ff/368>
Trace: 132d82 <sock_ioctl+1e/24>
Trace: 12a272 <sys_ioctl+fe/10c>
Trace: 10a6a2 <system_call+52/80>

Code: 1468d9 <arp_req_set+7d/2d0> cmpw $0x17,0x40(%esi)
Code: 1468de <arp_req_set+82/2d0> jne ffffffba <_EIP+ffffffba>
Code: 1468e0 <arp_req_set+84/2d0> cmpl $0x0,0x2c(%esp,1)
Code: 1468e5 <arp_req_set+89/2d0> jne 146979 <arp_req_set+11d/2d0>
Code: 1468eb <arp_req_set+8f/2d0> incl 0x90909000