svn commit: r296428 - head/sys/boot/common

[Konstantin Belousov]

On Mon, Mar 07, 2016 at 08:39:47AM -0700, Ian Lepore wrote:
> Is there no way to prevent the panic other than making the unwind data
> be present?  Why can't the kernel be fixed to cope with the missing
> data in some gentler way during a transition period?  Perhaps valid-but
> -fake data could be generated if necessary?  Being unable to get a
> stack traceback through a loaded module would be a small price to pay
> for trouble-free updgrades.

It is practically impossible to recover from partially-loaded object file'
module.  The loader workaround currently only affects HEAD and since the
MFC was done, 10.3 should be safe.  We always required lastest stable
for the jump to next major branch.

What could be done is demoting the panics (there are several, besides
the one which was triggered) to a message and refusing to load the
affected module. OTOH, if the reaction would be a message and not panic,
it definitely go ignored for quite some time.