On Fri, Nov 07, 2008 at 09:33:09PM +0100, Moritz Muehlenhoff wrote:
> On Fri, Jun 15, 2007 at 02:09:02PM +0200, Florian Lohoff wrote:
> >
> > Package: linux-image-2.6.18-4-486
> > Version: 2.6.18.dfsg.1-1
> >
> > Hi,
> > i am using the cyclades multiserial driver. There seems to be a bug in
> > the error path on loading the driver. The cyclades Hardware consists of
> > the PCI card and an external serial box. If the serial box is not
> > connected the driver recognizes this and bails out. Unloading
> > and reloading the module fails in this case with the below error
> > message:
>
> Is this issue still reproducible with current kernels? If so, could
> you report this upstream at bugzilla.kernel.org?
Still exists in:
linux-image-2.6.26-1-686 2.6.26-12~snapshot.12453
When unloading the module after the failed load and then catting
/proc/ioports gives the crash - The error path on initialization
is broken and does not free the resources in the error path. Fix should be
less than 10 lines.
[ 202.976225] BUG: unable to handle kernel paging request at c8a06e6b
[ 202.980065] IP: [<c01e1802>] strnlen+0x6/0x18
[ 202.980065] *pde = 07419067 *pte = 00000000
[ 202.980065] Oops: 0000 [#1] SMP
[ 202.980065] Modules linked in: autofs4 ac battery ipv6 dm_snapshot dm_mirror dm_log dm_mod firmware_class snd_ens1371 gameport snd_rawmidi snd_seq_device snd_ac97_codec ac97_bus rng_core parport_pc parport intel_agp button shpchp i2c_i801 snd_pcm snd_timer i2c_core snd soundcore snd_page_alloc agpgart evdev iTCO_wdt pci_hotplug floppy pcspkr joydev ext3 jbd mbcache ide_disk ata_generic libata scsi_mod dock uhci_hcd piix usbcore e100 mii ide_core thermal processor fan thermal_sys [last unloaded: cyclades]
[ 202.980065]
[ 202.980065] Pid: 2520, comm: cat Not tainted (2.6.26-1-686 #1)
[ 202.980065] EIP: 0060:[<c01e1802>] EFLAGS: 00010297 CPU: 0
[ 202.980065] EIP is at strnlen+0x6/0x18
[ 202.980065] EAX: c8a06e6b EBX: c6509346 ECX: c8a06e6b EDX: fffffffe
[ 202.980065] ESI: c8a06e6b EDI: ffffffff EBP: c650a000 ESP: c77f5da4
[ 202.980065] DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068
[ 202.980065] Process cat (pid: 2520, ti=c77f4000 task=c77eea20 task.ti=c77f4000)
[ 202.980065] Stack: c01e0c60 c77f5f1c c6509346 c77f5f1c ffffffff c01e0f35 ffffffff ffffffff
[ 202.980065] 00000000 00000cca c6509336 0000bc12 00000010 c650a000 00000000 ffffffff
[ 202.980065] c0311510 c1109420 00000086 000005fd 00000000 4250e0f7 0000002f 4250f6c7
[ 202.980065] Call Trace:
[ 202.980065] [<c01e0c60>] string+0x27/0x6f
[ 202.980065] [<c01e0f35>] vsnprintf+0x28d/0x452
[ 202.980065] [<c0133b28>] hrtimer_forward+0xe4/0x100
[ 202.980065] [<c013604c>] getnstimeofday+0x37/0xbc
[ 202.980065] [<c0108066>] pit_next_event+0x25/0x30
[ 202.980065] [<c0138770>] clockevents_program_event+0xc4/0xd2
[ 202.980065] [<c0139472>] tick_dev_program_event+0x1e/0x82
[ 202.980065] [<c0139525>] tick_program_event+0x1f/0x23
[ 202.980065] [<c0134658>] hrtimer_interrupt+0x12d/0x155
[ 202.980065] [<c012956e>] run_timer_softirq+0x30/0x17c
[ 202.980065] [<c0153b87>] __rcu_process_callbacks+0x8e/0x154
[ 202.980065] [<c0126579>] __do_softirq+0x66/0xd3
[ 202.980065] [<c018a209>] seq_printf+0x2b/0x48
[ 202.980065] [<c0126de5>] r_show+0x5b/0x64
[ 202.980065] [<c018a7bb>] seq_read+0x196/0x26f
[ 202.980065] [<c018a625>] seq_read+0x0/0x26f
[ 202.980065] [<c01a1162>] proc_reg_read+0x58/0x6b
[ 202.980065] [<c01a110a>] proc_reg_read+0x0/0x6b
[ 202.980065] [<c0174992>] vfs_read+0x81/0x11e
[ 202.980065] [<c0174de3>] sys_read+0x3c/0x63
[ 202.980065] [<c01038ce>] syscall_call+0x7/0xb
[ 202.980065] =======================
[ 202.980065] Code: c9 74 0c f2 ae 74 05 bf 01 00 00 00 4f 89 fa 5f 89 d0 c3 85 c9 57 89 c7 89 d0 74 05 f2 ae 75 01 4f 8
[ 202.980065] EIP: [<c01e1802>] strnlen+0x6/0x18 SS:ESP 0068:c77f5da4
[ 202.980065] ---[ end trace 3c1a37ae88182d0f ]---
Flo
--
Florian Lohoff flo@rfc822.org +49-171-2280134
Those who would give up a little freedom to get a little
security shall soon have neither - Benjamin Franklin
Attachment:
signature.asc
Description: Digital signature