lkml.org 
[lkml]   [2004]   [Jun]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: ov511 [2.6.7-rc3] does something odd
On Tue, Jun 15, 2004 at 07:37:42PM -0400, David Ford wrote:

> RIP: 0010:[<ffffffff803a9906>] <ffffffff803a9906>{ov51x_v4l1_ioctl+38}
>...
> Call Trace:<ffffffff801ad8bd>{sys_ioctl+685}
> <ffffffff8011221a>{system_call+126}
>
> Code: ff 8d a8 00 00 00 0f 88 8a 2c 00 00 31 c0 85 c0 41 b8 fc ff
> RIP <ffffffff803a9906>{ov51x_v4l1_ioctl+38} RSP <000001003c4edf18>

Interesting. I broke it in what looks like the same way on x86
last week..

Unable to handle kernel paging request at virtual address 6b6b6bff
printing eip:
6306ba4d
*pde = 00000000
Oops: 0002 [#1]
SMP
Modules linked in: ov511 videodev floppy uhci_hcd snd_pcm_oss loop snd_mixer_oss snd_emu10k1 snd_rawmidi snd_pcm snd_timer sndCPU: 3
EIP: 0060:[<6306ba4d>] Not tainted
EFLAGS: 00010246 (2.6.6-1.381smp)
EIP is at ov51x_v4l1_ioctl+0x2c/0x75 [ov511]
eax: 00000000 ebx: 6b6b6bff ecx: 6b6b6bff edx: 00000091
esi: 6b6b6b6b edi: 367490f4 ebp: 40047612 esp: 05612f78
ds: 007b es: 007b ss: 0068
Process xawtv (pid: 14706, threadinfo=05612000 task=1f2eb3c0)
Stack: 43c6030c 63073820 40047612 367490f4 ffffffe7 0216dc88 08ade2d0 43c6030c
05612000 0212ab53 00000000 00000000 00000000 00000000 05612fc4 08ade038
08ade2d0 05612000 fffeb200 00000004 40047612 08ade2d0 08ade038 08ade2d0
Call Trace:
[<0216dc88>] sys_ioctl+0x23d/0x2a0
[<0212ab53>] sys_alarm+0x30/0x4e

Code: f0 ff 8e 94 00 00 00 0f 88 18 21 00 00 31 c0 85 c0 ba fc ff

I started to look into it, but video_usercopy() gave me the creeps.
OV511 could use a going over with sparse too. I'm not convinced about
its handling of userspace pointers in its ioctl.

Dave

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 14:03    [W:0.028 / U:0.444 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site