[lkml]   [2008]   [Apr]   [23]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: 2.6.25-git2: BUG: unable to handle kernel paging request at ffffffffffffffff
Linus Torvalds wrote:
> Looks like possibly a double free to me (with the first free caused the
> page to be re-used, the second free is the one that triggers the debug
> message). But maybe Pekka or Christoph are better at reading those oopses.
>> =============================================================================
>> BUG kmalloc-4096: Padding overwritten. 0x0000000000000000-0x00000000ffffffff
>> -----------------------------------------------------------------------------

Okay, this doesn't make sense to me. The code does:

u8 *start;
u8 *fault;

/* ... */

start = page_address(page);

/* ... */

fault = check_bytes(start + length, POISON_INUSE, remainder);
if (!fault)
return 1;
while (end > fault && end[-1] == POISON_INUSE)

slab_err(s, page, "Padding overwritten. 0x%p-0x%p", fault, end - 1);

So how come we're printing out 'fault' as zero and 'end' at 4 GB? Christoph?

Zdenek, can you please send the full dmesg?


 \ /
  Last update: 2008-04-23 20:57    [W:0.247 / U:0.660 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site