https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=267028

--- Comment #237 from Mark Millard <marklmi26-f...@yahoo.com> ---
(In reply to Mark Millard from comment #235)

Old comments that reference one or both of:

0xFFFFF80000000000 (also  known as 18446735277616529408)
0xFFFFF80000000007

comment #44
comment #94
comment #148

Example from 44 (that 94 references):

#8  vtozoneslab (va=18446735277616529408, zone=<optimized out>, 
    slab=<optimized out>) at /usr/src/sys/vm/uma_int.h:635
#9  free (addr=0xfffff80000000007, mtp=0xffffffff824332b0 <M_SOLARIS>)
    at /usr/src/sys/kern/kern_malloc.c:911
#10 0xffffffff8214d251 in nv_mem_free (nvp=<optimized out>, 
    buf=0xfffff80000000007, size=16688648)
    at /usr/src/sys/contrib/openzfs/module/nvpair/nvpair.c:216

Example from 148 (an nfsd process context):

#7  0xffffffff80c895cb in atomic_fcmpset_long (src=18446741877726026240, 
    dst=<optimized out>, expect=<optimized out>)
    at /usr/src/sys/amd64/include/atomic.h:225
#8  selfdfree (stp=stp@entry=0xfffff80012aa8080, sfp=0xfffff80000000007)
    at /usr/src/sys/kern/sys_generic.c:1755
#9  0xffffffff80c8866b in seltdclear (td=td@entry=0xfffffe00b52e9a00)
    at /usr/src/sys/kern/sys_generic.c:1967

[I'll note that 18446741877726026240 = 0xFFFFFE00B52E9A00 but is likely
from use of dereferencing something based on the 0xfffff80000000007 in
some way.]

The history suggests that 0xfffff80000000007 (or 0xfffff80000000000)
corruption is not limited to a specific place.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to