Project Evil: The Evil Continues
sebastian ssmoller
sebastian.ssmoller at gmx.net
Mon Jan 26 12:20:05 PST 2004
hhmm seem to have problems with attachments ... i inlined the infos at
the end of that mail
seb
On Mon, 2004-01-26 at 21:09, sebastian ssmoller wrote:
> hi,
> first of all: great work !!
>
> i tested the ndis stuff with my asus m2400n centrino notebook. i took
> the driver from the asus m2 install cd (winxp version: w70n51.inf,
> w70n51.sys).
>
> i compiled everything as described and i was able to load the if_ndis
> module successfully. i was able to change several settings of ndis0 via
> ifconfig (ssid, wepmode, mac addr) ... but when i started dhclient with
> ndis0 i got a kernel panic :(
>
> i attached uname, dmesg, kernel config and all i could get from core
> dump and gdb.
>
> i can test more things / provide more info if needed / useful
>
> regards,
> seb
>
> ______________________________________________________________________
FreeBSD hadriel.linnet 5.2-CURRENT FreeBSD 5.2-CURRENT #7: Mon Jan 26
19:21:37 CET 2004 root at hadriel.linnet:/usr/obj/usr/src/sys/DEBUG
i386
Copyright (c) 1992-2004 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 5.2-CURRENT #7: Mon Jan 26 19:21:37 CET 2004
root at hadriel.linnet:/usr/obj/usr/src/sys/DEBUG
Preloaded elf kernel "/boot/kernel/kernel" at 0xc0876000.
Preloaded elf module "/boot/kernel/pf.ko" at 0xc08761cc.
Preloaded elf module "/boot/kernel/pfsync.ko" at 0xc0876274.
Preloaded elf module "/boot/kernel/pflog.ko" at 0xc0876320.
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Pentium(R) M processor 1600MHz (1600.06-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0x695 Stepping = 5
Features=0xa7e9fbbf<FPU,VME,DE,PSE,TSC,MSR,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,TM,PBE>
real memory = 527695872 (503 MB)
avail memory = 506642432 (483 MB)
Pentium Pro MTRR support enabled
acpi0: <A M I OEMRSDT> on motherboard
acpi0: Power Button (fixed)
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0xe408-0xe40b on acpi0
acpi_cpu0: <CPU> on acpi0
acpi_tz0: <Thermal Zone> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
pcib0: slot 2 INTA is routed to irq 5
pcib0: slot 29 INTA is routed to irq 5
pcib0: slot 29 INTB is routed to irq 5
pcib0: slot 29 INTC is routed to irq 5
pcib0: slot 29 INTD is routed to irq 4
pci0: <base peripheral> at device 0.1 (no driver attached)
pci0: <base peripheral> at device 0.3 (no driver attached)
agp0: <Intel 8285xM (85xGM GMCH) SVGA controller> port 0xdc00-0xdc07 mem
0xffa80000-0xffafffff,0xf0000000-0xf7ffffff irq 5 at device 2.0 on pci0
agp0: detected 8060k stolen memory
agp0: aperture size is 128M
pci0: <display> at device 2.1 (no driver attached)
uhci0: <Intel 82801DB (ICH4) USB controller USB-A> port 0xd480-0xd49f
irq 5 at device 29.0 on pci0
usb0: <Intel 82801DB (ICH4) USB controller USB-A> on uhci0
usb0: USB revision 1.0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
ums0: Logitech Optical USB Mouse, rev 2.00/3.40, addr 2, iclass 3/1
ums0: 3 buttons and Z dir.
uhci1: <Intel 82801DB (ICH4) USB controller USB-B> port 0xd800-0xd81f
irq 5 at device 29.1 on pci0
usb1: <Intel 82801DB (ICH4) USB controller USB-B> on uhci1
usb1: USB revision 1.0
uhub1: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2: <Intel 82801DB (ICH4) USB controller USB-C> port 0xd880-0xd89f
irq 5 at device 29.2 on pci0
usb2: <Intel 82801DB (ICH4) USB controller USB-C> on uhci2
usb2: USB revision 1.0
uhub2: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
pci0: <serial bus, USB> at device 29.7 (no driver attached)
pcib1: <ACPI PCI-PCI bridge> at device 30.0 on pci0
pci1: <ACPI PCI bus> on pcib1
pcib1: slot 3 INTC is routed to irq 5
pcib1: slot 4 INTA is routed to irq 5
pcib1: slot 5 INTA is routed to irq 5
cbb0: <RF5C476 PCI-CardBus Bridge> at device 3.0 on pci1
cardbus0: <CardBus bus> on cbb0
pccard0: <16-bit PCCard bus> on cbb0
pcib1: slot 3 INTA is routed to irq 5
cbb0: [MPSAFE]
cbb1: <RF5C476 PCI-CardBus Bridge> at device 3.1 on pci1
cardbus1: <CardBus bus> on cbb1
pccard1: <16-bit PCCard bus> on cbb1
pcib1: slot 3 INTB is routed to irq 5
cbb1: [MPSAFE]
pci1: <serial bus, FireWire> at device 3.2 (no driver attached)
rl0: <RealTek 8139 10/100BaseTX> port 0xc800-0xc8ff mem
0xff7efc00-0xff7efcff irq 5 at device 4.0 on pci1
rl0: Ethernet address: 00:0c:6e:f9:e2:25
miibus0: <MII bus> on rl0
rlphy0: <RealTek internal media interface> on miibus0
rlphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
pci1: <network> at device 5.0 (no driver attached)
isab0: <PCI-ISA bridge> at device 31.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel ICH4 UDMA100 controller> port
0xffa0-0xffaf,0-0x3,0-0x7,0-0x3,0-0x7 at device 31.1 on pci0
ata0: at 0x1f0 irq 14 on atapci0
ata0: [MPSAFE]
ata1: at 0x170 irq 15 on atapci0
ata1: [MPSAFE]
pci0: <multimedia, audio> at device 31.5 (no driver attached)
pci0: <simple comms> at device 31.6 (no driver attached)
acpi_button0: <Sleep Button> on acpi0
acpi_lid0: <Control Method Lid Switch> on acpi0
acpi_acad0: <AC Adapter> on acpi0
acpi_cmbat0: <Control Method Battery> on acpi0
atkbdc0: <Keyboard controller (i8042)> port 0x64,0x60 irq 1 on acpi0
atkbd0: <AT Keyboard> flags 0x1 irq 1 on atkbdc0
kbd0 at atkbd0
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: model Generic PS/2 mouse, device ID 0
acpi_ec0: <Embedded Controller: GPE 0x1c> port 0x66,0x62 on acpi0
npx0: [FAST]
npx0: <math processor> on motherboard
npx0: INT 16 interface
orm0: <Option ROM> at iomem 0xc0000-0xccfff on isa0
pmtimer0 on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on
isa0
Timecounter "TSC" frequency 1600064000 Hz quality 800
Timecounters tick every 10.000 msec
pfsync: $Name: $
pflog: $Name: $
pf: $Name: $
acpi_cpu: throttling enabled, 8 steps (100% to 12.5%), currently 100.0%
ad0: 57231MB <IC25N060ATMR04-0> [116280/16/63] at ata0-master UDMA100
acd0: CDRW <TOSHIBA DVD-ROM SD-R2312> at ata1-master PIO4
Mounting root from ufs:/dev/ad0s3a
ndis0: <Intel(R) PRO/Wireless LAN 2100 3B Mini PCI Adapter> mem
0xff7ff000-0xff7fffff irq 5 at device 5.0 on pci1
ndis0: NDIS API version: 5.1
ndis0: 802.11 address: 00:04:23:7d:fc:bf
ndis0: 11b rates: 11Mbps 2Mbps 1Mbps
machine i386
cpu I686_CPU
ident DEBUG
makeoptions DEBUG=-g #Build kernel with gdb(1) debug symbols
options SCHED_ULE
options INET #InterNETworking
options INET6 #IPv6 communications protocols
options FFS #Berkeley Fast Filesystem
options SOFTUPDATES #Enable FFS soft updates support
options UFS_ACL #Support for access control lists
options UFS_DIRHASH #Improve performance on big directories
options MD_ROOT #MD is a potential root device
options NFSCLIENT #Network Filesystem Client
options NFSSERVER #Network Filesystem Server
options NFS_ROOT #NFS usable as root device, requires NFSCLIENT
options MSDOSFS #MSDOS Filesystem
options CD9660 #ISO 9660 Filesystem
options PROCFS #Process filesystem (requires PSEUDOFS)
options PSEUDOFS #Pseudo-filesystem framework
options COMPAT_43 #Compatible with BSD 4.3 [KEEP THIS!]
options COMPAT_FREEBSD4 #Compatible with FreeBSD4
options SCSI_DELAY=15000 #Delay (in ms) before probing SCSI
options KTRACE #ktrace(1) support
options SYSVSHM #SYSV-style shared memory
options SYSVMSG #SYSV-style message queues
options SYSVSEM #SYSV-style semaphores
options _KPOSIX_PRIORITY_SCHEDULING #Posix P1003_1B real-time
extensions
options KBD_INSTALL_CDEV # install a CDEV entry in /dev
options AHC_REG_PRETTY_PRINT # Print register bitfields in debug
# output. Adds ~128k to driver.
options AHD_REG_PRETTY_PRINT # Print register bitfields in debug
# output. Adds ~215k to driver.
options DDB #Enable the kernel debugger
options INVARIANTS #Enable calls of extra sanity checking
options INVARIANT_SUPPORT #Extra sanity checks of internal structures,
required by INVARIANTS
options WITNESS #Enable checks to detect deadlocks and cycles
options WITNESS_SKIPSPIN #Don't run witness on spinlocks for speed
device isa
device eisa
device pci
device ata
device atadisk # ATA disk drives
device atapicd # ATAPI CDROM drives
device atapifd # ATAPI floppy drives
device atapist # ATAPI tape drives
options ATA_STATIC_ID #Static device numbering
device scbus # SCSI bus (required)
device ch # SCSI media changers
device da # Direct Access (disks)
device sa # Sequential Access (tape etc)
device cd # CD
device pass # Passthrough device (direct SCSI access)
device ses # SCSI Environmental Services (and SAF-TE)
device atkbdc # AT keyboard controller
device atkbd # AT keyboard
device psm # PS/2 mouse
device vga # VGA video card driver
device splash # Splash screen and screen saver support
device sc
device agp # support several AGP chipsets
device npx
device pmtimer
device cbb # cardbus (yenta) bridge
device pccard # PC Card (16-bit) bus
device cardbus # CardBus (32-bit) bus
device miibus # MII bus support
device rl # RealTek 8129/8139
device wlan # 802.11 support
device an # Aironet 4500/4800 802.11 wireless NICs.
device awi # BayStack 660 and others
device wi # WaveLAN/Intersil/Symbol 802.11 wireless NICs.
device random # Entropy device
device loop # Network loopback
device ether # Ethernet support
device sl # Kernel SLIP
device ppp # Kernel PPP
device tun # Packet tunnel.
device pty # Pseudo-ttys (telnet etc)
device md # Memory "disks"
device gif # IPv6 and IPv4 tunneling
device faith # IPv6-to-IPv4 relaying (translation)
device bpf # Berkeley packet filter
device uhci # UHCI PCI->USB interface
device ohci # OHCI PCI->USB interface
device usb # USB Bus (required)
device ugen # Generic
device uhid # "Human Interface Devices"
device ukbd # Keyboard
device ulpt # Printer
device umass # Disks/Mass storage - Requires scbus and da
device ums # Mouse
device urio # Diamond Rio 500 MP3 player
device uscanner # Scanners
device aue # ADMtek USB ethernet
device axe # ASIX Electronics USB ethernet
device cue # CATC USB ethernet
device kue # Kawasaki LSI USB ethernet
device acpi
options PFIL_HOOKS
options RANDOM_IP_ID
Fatal trap 12: page fault while in kernel mode
fault virtual address = 0xa32e8266
fault code = supervisor read, page not present
instruction pointer = 0x8:0xc06c4132
stack pointer = 0x10:0xe13bdb88
frame pointer = 0x10:0xe13bdbc4
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 602 (ndis taskqueue)
panic: from debugger
at line 450 in file /usr/src/sys/ddb/db_command.c
Fatal trap 3: breakpoint instruction fault while in kernel mode
instruction pointer = 0x8:0xc06b5d84
stack pointer = 0x10:0xe13bd910
frame pointer = 0x10:0xe13bd91c
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags = IOPL = 0
current process = 602 (ndis taskqueue)
panic: from debugger
at line 450 in file /usr/src/sys/ddb/db_command.cUptime: 9m56s
Dumping 503 MB
16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 256 272 288 304
320 336 352 368 384 400 416 432 448 464 480 496
---
Reading symbols from /boot/kernel/pf.ko...done.
Loaded symbols for /boot/kernel/pf.ko
Reading symbols from /boot/kernel/pfsync.ko...done.
Loaded symbols for /boot/kernel/pfsync.ko
Reading symbols from /boot/kernel/pflog.ko...done.
Loaded symbols for /boot/kernel/pflog.ko
Reading symbols from
/usr/obj/usr/src/sys/DEBUG/modules/usr/src/sys/modules/linprocfs/linprocfs.ko.debug...done.
Loaded symbols for
/usr/obj/usr/src/sys/DEBUG/modules/usr/src/sys/modules/linprocfs/linprocfs.ko.debug
Reading symbols from
/usr/obj/usr/src/sys/DEBUG/modules/usr/src/sys/modules/linux/linux.ko.debug...done.
Loaded symbols for
/usr/obj/usr/src/sys/DEBUG/modules/usr/src/sys/modules/linux/linux.ko.debug
Reading symbols from /boot/kernel/blank_saver.ko...done.
Loaded symbols for /boot/kernel/blank_saver.ko
Reading symbols from /boot/kernel/if_ndis.ko...done.
Loaded symbols for /boot/kernel/if_ndis.ko
Reading symbols from
/usr/obj/usr/src/sys/DEBUG/modules/usr/src/sys/modules/ndis/ndis.ko.debug...done.
Loaded symbols for
/usr/obj/usr/src/sys/DEBUG/modules/usr/src/sys/modules/ndis/ndis.ko.debug
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
240 dumping++;
(kgdb) bt
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1 0xc054a8d3 in boot (howto=260) at
/usr/src/sys/kern/kern_shutdown.c:374
#2 0xc054ac97 in __panic () at /usr/src/sys/kern/kern_shutdown.c:552
#3 0xc046f9d2 in db_panic () at /usr/src/sys/ddb/db_command.c:450
#4 0xc046f922 in db_command (last_cmdp=0xc075d300, cmd_table=0x0,
aux_cmd_tablep=0xc0727ea0, aux_cmd_tablep_end=0xc0727ea4) at
/usr/src/sys/ddb/db_command.c:346
#5 0xc046fa75 in db_command_loop () at
/usr/src/sys/ddb/db_command.c:472
#6 0xc0472a85 in db_trap (type=12, code=0) at
/usr/src/sys/ddb/db_trap.c:73
#7 0xc06b5acc in kdb_trap (type=12, code=0, regs=0xe13bdb48) at
/usr/src/sys/i386/i386/db_interface.c:171
#8 0xc06c5ec6 in trap_fatal (frame=0xe13bdb48, eva=0) at
/usr/src/sys/i386/i386/trap.c:816
#9 0xc06c5b92 in trap_pfault (frame=0xe13bdb48, usermode=0,
eva=2737734246) at /usr/src/sys/i386/i386/trap.c:735
#10 0xc06c5753 in trap (frame=
{tf_fs = -1066401768, tf_es = 16, tf_ds = -998244336, tf_edi =
-1557233050, tf_esi = -516170840, tf_ebp = -516170812, tf_isp =
-516170892, tf_ebx = -1557233054, tf_edx = 6, tf_ecx = 1, tf_eax = 0,
tf_trapno = 12, tf_err = 0, tf_eip = -1066647246, tf_cs = 8, tf_eflags =
66051, tf_esp = 1, tf_ss = -998194816})
at /usr/src/sys/i386/i386/trap.c:420
#11 0xc06c4132 in bcmp () at {standard input}:660
#12 0xc493c52c in ndis_getstate_80211 () from /boot/kernel/if_ndis.ko
#13 0xc493b586 in ndis_ticktask () from /boot/kernel/if_ndis.ko
#14 0xc4c0ba25 in ndis_runq (arg=0xc4c0fb50) at
/usr/src/sys/compat/ndis/kern_ndis.c:222
#15 0xc0535794 in fork_exit (callout=0xc4c0b950 <ndis_runq>, arg=0x0,
frame=0x0) at /usr/src/sys/kern/kern_fork.c:799
(kgdb) l
235 static void
236 doadump(void)
237 {
238
239 savectx(&dumppcb);
240 dumping++;
241 dumpsys(&dumper);
242 }
243
244 /*
(kgdb)
More information about the freebsd-current
mailing list