kern/109406: Broadcom WLAN driver 4.100.15.5 doesn't work with Ndisgen

[Vincent Howell]

>Number:         109406
>Category:       kern
>Synopsis:       Broadcom WLAN driver 4.100.15.5 doesn't work with Ndisgen
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Feb 21 20:30:25 GMT 2007
>Closed-Date:
>Last-Modified:
>Originator:     Vincent Howell
>Release:        FreeBSD 6.2-STABLE i386
>Organization:
n/a
>Environment:
FreeBSD or-76-2-14-85.dhcp.embarqhsd.net 6.2-STABLE FreeBSD 6.2-STABLE #0: Tue Feb 20 22:09:26 PST 2007     vince at or-76-2-14-85.dhcp.embarqhsd.net:/usr/obj/usr/src/sys/GENERIC  i386
>Description:
I'm trying to get my Broadcom BCM43XX based WNIC working on FreeBSD by using Ndisgen to convert my laptop's Windows driver into a FreeBSD Kernel module then loading it. But the process fails with "no match for IoGetDeviceObjectPointer" and a Trap 12 kernel panic upon unloading the module.
>How-To-Repeat:
> mkdir broadcom
> cd broadcom
> fetch ftp://ftp.hp.com/pub/softpaq/sp34001-34500/sp34152.exe
> cabextract -q -L -F 'bcmwl5*' sp34152.exe
> ndisgen bcmwl5.inf BCMWL5.SYS
* Leave firmware question blank.
> kldload ndis
* -OR-
> kldload if_ndis
> kldload ./BCMWL5_SYS.ko
kernel: no match for IoGetDeviceObjectPointer
kernel: ndis0: <Broadcom 802.11b/g WLAN> mem 0xd0000000-0xd0003fff irq 18 at device 0.0 on pci6
kernel: ndis0: couldn't map memory
kernel: device_attach: ndis0 attach returned 6

Then when I try unloading the module:

> kldunload BCMWL5_SYS.ko
Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address = 0x8
fault code = supervisor read, page not present
instruction pointer = 0x20:0xc573b2e1
stack pointer = 0x28:0xe7d1bc1c
frame pointer = 0x28:0xe7d1bc30
code segment = base 0x0, limit 0xfffff, type 0x1b
             = DPL 0, pres 1, def32 1, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 727 (kldunload)
trap number = 12
panic: page fault
cpuid = 0
Uptime: 15m 14s
Automatic reboot in 15 seconds - press a key on the console to abort.
>Fix:

>Release-Note:
>Audit-Trail:
>Unformatted: