Panic in AHDEMO mode (was: net-mgmt/aircrack-ng on FreeBSD 7+ / call for testing)

[PseudoCylon]

>
> Fatal trap 12: page fault while in kernel mode
> cpuid = 0; apic id = 00
> fault virtual address   = 0xffff -> !!!chan == 0xffff

> #7  0xc0adb2da in ieee80211_chan2mode (!!!chan=0xffff)
>     at /usr/src/sys/net80211/ieee80211.c:1427
> #8  0xc0afe2de in ieee80211_node_set_chan (ni=0xcfe39000, !!!chan=0xffff)
>     at /usr/src/sys/net80211/ieee80211_node.c:285

#8.5 ieee80211_alloc_node()
        ni->ni_chan = IEEE80211_CHAN_ANYC; /* == *0xffff (1.) */
        http://fxr.watson.org/fxr/source/net80211/ieee80211_node.c#L1131

        (1.)
        IEEE80211_CHAN_ANYC
        http://fxr.watson.org/fxr/source/net80211/_ieee80211.h?im=3#L150

> #9  0xc0b0028b in ieee80211_dup_bss (vap=0xc7651000, macaddr=0xc725ad3c
> "")
>     at /usr/src/sys/net80211/ieee80211_node.c:1219
> #10 0xc0b003bc in ieee80211_fakeup_adhoc_node (vap=0xc7651000,
>     macaddr=0xc725ad3c "") at
> /usr/src/sys/net80211/ieee80211_node.c:1401

Maybe?
http://fxr.watson.org/fxr/source/net80211/ieee80211_node.c#L1219
- ieee80211_node_set_chan(ni, bss->ni_chan);
+ ieee80211_node_set_chan(ni, ic->ic_curchan);

vap->iv_bss->ni_chan tend to be 0xffff in early stage. (Hence
additional ifconfig to make it work.) I've found out ic_curchan is
more reliable for that matter.


AK