https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=234296
Mark Johnston changed:
What|Removed |Added
Assignee|b...@freebsd.org|ma...@freebsd.org
--
You are rece
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=234296
--- Comment #8 from Mark Johnston ---
sizeof(struct vnode) == 480, so it looks like this is a use-after-free in the
512 byte malloc zone. The callout is at offset 0xb8 into the structure. Based
on some skimming of the CTF type graph, this
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=234296
--- Comment #7 from Mark Johnston ---
I looked at the kernel dumps. In all three cases, we crashed while processing
a callout that had been mostly zeroed out. However, in all cases, at offset
0x10 into the callout there is a pointer in th
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=234296
--- Comment #6 from Victor ---
same problem on another server
12.0-STABLE FreeBSD 12.0-STABLE r342878 OFFICE_GW amd64
kgdb /boot/kernel/kernel /var/crash/vmcore.6
GNU gdb (GDB) 8.2 [GDB v8.2 for FreeBSD]
Copyright (C) 2018 Free Software
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=234296
--- Comment #5 from Victor ---
(In reply to Mark Johnston from comment #4)
added to google disk
This bug was observed even with the head and in release it is also present
--
You are receiving this mail because:
You are the assignee for th
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=234296
--- Comment #4 from Mark Johnston ---
(In reply to Victor from comment #3)
Thanks. Could you also provide the matching /boot/kernel and
/usr/lib/debug/boot/kernel? I didn't notice before that you were on -STABLE
and not -RELEASE.
--
You
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=234296
--- Comment #3 from Victor ---
(In reply to Mark Johnston from comment #2)
posted on google disk
https://drive.google.com/open?id=1E6pFrMYLg_mzWpqTa2hipF3zdORHhs3v
--
You are receiving this mail because:
You are the assignee for the bug.
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=234296
Mark Johnston changed:
What|Removed |Added
CC||ma...@freebsd.org
--- Comment #2 f
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=234296
--- Comment #1 from Victor ---
updated to 12.0-STABLE r342388 with CFLAGS= -O0 -pipe build options. The
situation has not changed
panic: page fault
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=234296
Bug ID: 234296
Summary: FreeBSD 12.0-STABLE r342216 Fatal trap 12
Product: Base System
Version: 12.0-STABLE
Hardware: amd64
OS: Any
Status: New
Seve
10 matches
Mail list logo
