panic in recent RELENG_5 tcp code path

[Jeremie Le Hen]

Hi Doug, thanks for your answer.

> Can you load a kernel.debug into gdb and do "l *(tcp_output+0xb49)"  and
> post the output? that offset isn't a function call in my kernel.
> tcp_output() doesn't call m_copypacket directly so the exact spot is
> difficult to find.

%%%
    (gdb) l *(tcp_output+0xb49)
    0xc061b63d is in tcp_output (../../../netinet/tcp_output.c:813).
    808                     m->m_data += max_linkhdr;
    809                     m->m_len = hdrlen;
    810                     if (len <= MHLEN - hdrlen - max_linkhdr) {
    811                             m_copydata(so->so_snd.sb_mb, off, (int) len,
    812                                 mtod(m, caddr_t) + hdrlen);
    813                             m->m_len += len;
    814                     } else {
    815                             m->m_next = m_copy(so->so_snd.sb_mb, off, (int) len);
    816                             if (m->m_next == 0) {
    817                                     SOCKBUF_UNLOCK(&so->so_snd);
%%%

tcp_output.c rev 1.100.2.7.

-- 
Jeremie Le Hen
< jeremie at le-hen dot org >< ttz at chchile dot org >