Greg Steuck <gne...@openbsd.org> writes: > I forced a trace in the case when the system fails with that protection > fault. It's mostly the same as the more complete trace I noted in the > other case:
With a tiny bit more manual printing added to ddb I confirmed the use-after-free diagnosis is correct. Stopped at sd_buf_done+0x18: movq 0x38(%rax),%12 At this point %rax is 0xdeadbeefdeadbeef Thanks Greg
