Re: 2.6.15-rc2-git6 + ipw2200 1.0.8 -- Slab corruption

[Zhu Yi]

On Sat, 2005-11-26 at 23:25 -0800, Miles Lane wrote:
> [4295910.815000] ipw2200: Firmware error detected.  Restarting.
> [4295910.815000] ipw2200: Sysfs 'error' log captured.
> [4295938.038000] Slab corruption: start=ed68ebf8, len=2048
> [4295938.038000] Redzone: 0x5a2cf071/0x3c07fbbe.
> [4295938.038000] Last user: [<52065000>](0x52065000)
> [4295938.038000] 760: 8c 00 00 00 76 fb 07 3c 92 03 00 00 88 00 00 00
> [4295938.039000] 770: 7f fb 07 3c 01 00 00 00 8a 00 00 00 82 fb 07 3c
> [4295938.039000] 780: 9c 02 00 00 8a 00 00 00 88 fb 07 3c 01 02 00 00
> [4295938.039000] 790: 54 00 00 00 8c fb 07 3c 77 01 00 00 51 00 00 00
> [4295938.039000] 7a0: 98 fb 07 3c 07 00 00 00 52 00 00 00 9b fb 07 3c
> [4295938.039000] 7b0: 05 00 00 00 53 00 00 00 9e fb 07 3c 05 00 00 00
> [4295938.039000] Prev obj: start=ed68e3ec, len=2048
> [4295938.039000] Redzone: 0x170fc2a5/0x170fc2a5.
> [4295938.039000] Last user:
> [<f92a40a6>](ipw_alloc_error_log+0x114/0x208 [ipw2200])
> [4295938.039000] 000: 9f 65 0e 00 e0 00 00 80 46 03 00 00 05 00 00 00
> [4295938.039000] 010: 80 00 00 00 08 e4 68 ed 58 f3 68 ed 06 00 00 00
> [4295938.039000] Next obj: start=ed68f404, len=2048
> [4295938.039000] Redzone: 0x8b/0x170fc2a5.
> [4295938.039000] Last user: [<c02835ae>](tty_write+0xf6/0x21e)
> [4295938.039000] 000: c3 fb 07 3c 62 00 00 00 20 00 00 00 06 fc 07 3c
> [4295938.039000] 010: 08 00 00 00 23 00 00 00 11 fc 07 3c 06 00 00 00
> [4295938.039000] slab error in cache_alloc_debugcheck_after(): cache
> `size-2048': double free, or memory outside object was overwritten
> [4295938.039000]  [<c0103f06>] dump_stack+0x1e/0x20
> [4295938.039000]  [<c014bc9d>] __slab_error+0x2f/0x31
> [4295938.039000]  [<c014df78>] cache_alloc_debugcheck_after+0xe2/0x159
> [4295938.039000]  [<c014e432>] __kmalloc+0xae/0xfe
> [4295938.039000]  [<c030385c>] __alloc_skb+0x52/0x153
> [4295938.039000]  [<c03022e5>] sock_alloc_send_pskb+0xfb/0x229
> [4295938.039000]  [<c0302441>] sock_alloc_send_skb+0x2e/0x30
> [4295938.039000]  [<c03649ef>] unix_stream_sendmsg+0x1ed/0x3e0
> [4295938.039000]  [<c02ff0dc>] sock_aio_write+0xeb/0x12a
> [4295938.039000]  [<c0164421>] do_sync_write+0xae/0xfd
> [4295938.039000]  [<c0164604>] vfs_write+0x194/0x19b
> [4295938.039000]  [<c01646c0>] sys_write+0x47/0x6e
> [4295938.039000]  [<c010304b>] sysenter_past_esp+0x54/0x75
> [4295938.039000] ed68ebf4: redzone 1: 0x5a2cf071, redzone 2: 0x3c07fbbe.

It has been fixed in the ipw2200 driver comes with 2.6.15-rc2. If you
use 1.0.8 driver, you need to apply this patch.
http://bughost.org/bugzilla/show_bug.cgi?id=821

Thanks,
-yi

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/