Re: Project Evil: The Evil Continues

From: sebastian ssmoller <sebastian.ssmoller_at_gmx.net>
Date: Mon, 26 Jan 2004 21:20:57 +0100
hhmm seem to have problems with attachments ... i inlined the infos at
the end of that mail 

seb

On Mon, 2004-01-26 at 21:09, sebastian ssmoller wrote:
> hi,
> first of all: great work !!
> 
> i tested the ndis stuff with my asus m2400n centrino notebook. i took
> the driver from the asus m2 install cd (winxp version: w70n51.inf,
> w70n51.sys).
> 
> i compiled everything as described and i was able to load the if_ndis
> module successfully. i was able to change several settings of ndis0 via
> ifconfig (ssid, wepmode, mac addr) ... but when i started dhclient with
> ndis0 i got a kernel panic :(
> 
> i attached uname, dmesg, kernel config and all i could get from core
> dump and gdb.
> 
> i can test more things / provide more info if needed / useful
> 
> regards,
> seb
> 
> ______________________________________________________________________
FreeBSD hadriel.linnet 5.2-CURRENT FreeBSD 5.2-CURRENT #7: Mon Jan 26
19:21:37 CET 2004     root_at_hadriel.linnet:/usr/obj/usr/src/sys/DEBUG 
i386


Copyright (c) 1992-2004 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
	The Regents of the University of California. All rights reserved.
FreeBSD 5.2-CURRENT #7: Mon Jan 26 19:21:37 CET 2004
    root_at_hadriel.linnet:/usr/obj/usr/src/sys/DEBUG
Preloaded elf kernel "/boot/kernel/kernel" at 0xc0876000.
Preloaded elf module "/boot/kernel/pf.ko" at 0xc08761cc.
Preloaded elf module "/boot/kernel/pfsync.ko" at 0xc0876274.
Preloaded elf module "/boot/kernel/pflog.ko" at 0xc0876320.
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Pentium(R) M processor 1600MHz (1600.06-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0x695  Stepping = 5
 
Features=0xa7e9fbbf<FPU,VME,DE,PSE,TSC,MSR,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,TM,PBE>
real memory  = 527695872 (503 MB)
avail memory = 506642432 (483 MB)
Pentium Pro MTRR support enabled
acpi0: <A M I OEMRSDT> on motherboard
acpi0: Power Button (fixed)
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0xe408-0xe40b on acpi0
acpi_cpu0: <CPU> on acpi0
acpi_tz0: <Thermal Zone> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
pcib0: slot 2 INTA is routed to irq 5
pcib0: slot 29 INTA is routed to irq 5
pcib0: slot 29 INTB is routed to irq 5
pcib0: slot 29 INTC is routed to irq 5
pcib0: slot 29 INTD is routed to irq 4
pci0: <base peripheral> at device 0.1 (no driver attached)
pci0: <base peripheral> at device 0.3 (no driver attached)
agp0: <Intel 8285xM (85xGM GMCH) SVGA controller> port 0xdc00-0xdc07 mem
0xffa80000-0xffafffff,0xf0000000-0xf7ffffff irq 5 at device 2.0 on pci0
agp0: detected 8060k stolen memory
agp0: aperture size is 128M
pci0: <display> at device 2.1 (no driver attached)
uhci0: <Intel 82801DB (ICH4) USB controller USB-A> port 0xd480-0xd49f
irq 5 at device 29.0 on pci0
usb0: <Intel 82801DB (ICH4) USB controller USB-A> on uhci0
usb0: USB revision 1.0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
ums0: Logitech Optical USB Mouse, rev 2.00/3.40, addr 2, iclass 3/1
ums0: 3 buttons and Z dir.
uhci1: <Intel 82801DB (ICH4) USB controller USB-B> port 0xd800-0xd81f
irq 5 at device 29.1 on pci0
usb1: <Intel 82801DB (ICH4) USB controller USB-B> on uhci1
usb1: USB revision 1.0
uhub1: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2: <Intel 82801DB (ICH4) USB controller USB-C> port 0xd880-0xd89f
irq 5 at device 29.2 on pci0
usb2: <Intel 82801DB (ICH4) USB controller USB-C> on uhci2
usb2: USB revision 1.0
uhub2: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
pci0: <serial bus, USB> at device 29.7 (no driver attached)
pcib1: <ACPI PCI-PCI bridge> at device 30.0 on pci0
pci1: <ACPI PCI bus> on pcib1
pcib1: slot 3 INTC is routed to irq 5
pcib1: slot 4 INTA is routed to irq 5
pcib1: slot 5 INTA is routed to irq 5
cbb0: <RF5C476 PCI-CardBus Bridge> at device 3.0 on pci1
cardbus0: <CardBus bus> on cbb0
pccard0: <16-bit PCCard bus> on cbb0
pcib1: slot 3 INTA is routed to irq 5
cbb0: [MPSAFE]
cbb1: <RF5C476 PCI-CardBus Bridge> at device 3.1 on pci1
cardbus1: <CardBus bus> on cbb1
pccard1: <16-bit PCCard bus> on cbb1
pcib1: slot 3 INTB is routed to irq 5
cbb1: [MPSAFE]
pci1: <serial bus, FireWire> at device 3.2 (no driver attached)
rl0: <RealTek 8139 10/100BaseTX> port 0xc800-0xc8ff mem
0xff7efc00-0xff7efcff irq 5 at device 4.0 on pci1
rl0: Ethernet address: 00:0c:6e:f9:e2:25
miibus0: <MII bus> on rl0
rlphy0: <RealTek internal media interface> on miibus0
rlphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
pci1: <network> at device 5.0 (no driver attached)
isab0: <PCI-ISA bridge> at device 31.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel ICH4 UDMA100 controller> port
0xffa0-0xffaf,0-0x3,0-0x7,0-0x3,0-0x7 at device 31.1 on pci0
ata0: at 0x1f0 irq 14 on atapci0
ata0: [MPSAFE]
ata1: at 0x170 irq 15 on atapci0
ata1: [MPSAFE]
pci0: <multimedia, audio> at device 31.5 (no driver attached)
pci0: <simple comms> at device 31.6 (no driver attached)
acpi_button0: <Sleep Button> on acpi0
acpi_lid0: <Control Method Lid Switch> on acpi0
acpi_acad0: <AC Adapter> on acpi0
acpi_cmbat0: <Control Method Battery> on acpi0
atkbdc0: <Keyboard controller (i8042)> port 0x64,0x60 irq 1 on acpi0
atkbd0: <AT Keyboard> flags 0x1 irq 1 on atkbdc0
kbd0 at atkbd0
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: model Generic PS/2 mouse, device ID 0
acpi_ec0: <Embedded Controller: GPE 0x1c> port 0x66,0x62 on acpi0
npx0: [FAST]
npx0: <math processor> on motherboard
npx0: INT 16 interface
orm0: <Option ROM> at iomem 0xc0000-0xccfff on isa0
pmtimer0 on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on
isa0
Timecounter "TSC" frequency 1600064000 Hz quality 800
Timecounters tick every 10.000 msec
pfsync: $Name:  $
pflog: $Name:  $
pf: $Name:  $
acpi_cpu: throttling enabled, 8 steps (100% to 12.5%), currently 100.0%
ad0: 57231MB <IC25N060ATMR04-0> [116280/16/63] at ata0-master UDMA100
acd0: CDRW <TOSHIBA DVD-ROM SD-R2312> at ata1-master PIO4
Mounting root from ufs:/dev/ad0s3a
ndis0: <Intel(R) PRO/Wireless LAN 2100 3B Mini PCI Adapter> mem
0xff7ff000-0xff7fffff irq 5 at device 5.0 on pci1
ndis0: NDIS API version: 5.1
ndis0: 802.11 address: 00:04:23:7d:fc:bf
ndis0: 11b rates: 11Mbps 2Mbps 1Mbps





machine		i386
cpu		I686_CPU
ident		DEBUG

makeoptions	DEBUG=-g		#Build kernel with gdb(1) debug symbols

options 	SCHED_ULE
options 	INET			#InterNETworking
options 	INET6			#IPv6 communications protocols
options 	FFS			#Berkeley Fast Filesystem
options 	SOFTUPDATES		#Enable FFS soft updates support
options 	UFS_ACL			#Support for access control lists
options 	UFS_DIRHASH		#Improve performance on big directories
options 	MD_ROOT			#MD is a potential root device
options 	NFSCLIENT		#Network Filesystem Client
options 	NFSSERVER		#Network Filesystem Server
options 	NFS_ROOT		#NFS usable as root device, requires NFSCLIENT
options 	MSDOSFS			#MSDOS Filesystem
options 	CD9660			#ISO 9660 Filesystem
options 	PROCFS			#Process filesystem (requires PSEUDOFS)
options 	PSEUDOFS		#Pseudo-filesystem framework
options 	COMPAT_43		#Compatible with BSD 4.3 [KEEP THIS!]
options 	COMPAT_FREEBSD4		#Compatible with FreeBSD4
options 	SCSI_DELAY=15000	#Delay (in ms) before probing SCSI
options 	KTRACE			#ktrace(1) support
options 	SYSVSHM			#SYSV-style shared memory
options 	SYSVMSG			#SYSV-style message queues
options 	SYSVSEM			#SYSV-style semaphores
options 	_KPOSIX_PRIORITY_SCHEDULING #Posix P1003_1B real-time
extensions
options 	KBD_INSTALL_CDEV	# install a CDEV entry in /dev
options 	AHC_REG_PRETTY_PRINT	# Print register bitfields in debug
					# output.  Adds ~128k to driver.
options 	AHD_REG_PRETTY_PRINT	# Print register bitfields in debug
					# output.  Adds ~215k to driver.

options 	DDB			#Enable the kernel debugger
options 	INVARIANTS		#Enable calls of extra sanity checking
options 	INVARIANT_SUPPORT	#Extra sanity checks of internal structures,
required by INVARIANTS
options 	WITNESS			#Enable checks to detect deadlocks and cycles
options 	WITNESS_SKIPSPIN	#Don't run witness on spinlocks for speed

device		isa
device		eisa
device		pci

device		ata
device		atadisk			# ATA disk drives
device		atapicd			# ATAPI CDROM drives
device		atapifd			# ATAPI floppy drives
device		atapist			# ATAPI tape drives
options 	ATA_STATIC_ID		#Static device numbering


device		scbus		# SCSI bus (required)
device		ch		# SCSI media changers
device		da		# Direct Access (disks)
device		sa		# Sequential Access (tape etc)
device		cd		# CD
device		pass		# Passthrough device (direct SCSI access)
device		ses		# SCSI Environmental Services (and SAF-TE)


device		atkbdc		# AT keyboard controller
device		atkbd		# AT keyboard
device		psm		# PS/2 mouse

device		vga		# VGA video card driver

device		splash		# Splash screen and screen saver support

device		sc
device		agp		# support several AGP chipsets
device		npx

device		pmtimer

device		cbb			# cardbus (yenta) bridge

device		pccard			# PC Card (16-bit) bus
device		cardbus			# CardBus (32-bit) bus


device		miibus		# MII bus support

device		rl		# RealTek 8129/8139


device		wlan		# 802.11 support
device		an		# Aironet 4500/4800 802.11 wireless NICs. 
device		awi		# BayStack 660 and others
device		wi		# WaveLAN/Intersil/Symbol 802.11 wireless NICs.



device		random		# Entropy device
device		loop		# Network loopback
device		ether		# Ethernet support
device		sl		# Kernel SLIP
device		ppp		# Kernel PPP
device		tun		# Packet tunnel.
device		pty		# Pseudo-ttys (telnet etc)
device		md		# Memory "disks"
device		gif		# IPv6 and IPv4 tunneling
device		faith		# IPv6-to-IPv4 relaying (translation)

device		bpf		# Berkeley packet filter

device		uhci		# UHCI PCI->USB interface
device		ohci		# OHCI PCI->USB interface
device		usb		# USB Bus (required)

device		ugen		# Generic
device		uhid		# "Human Interface Devices"
device		ukbd		# Keyboard
device		ulpt		# Printer
device		umass		# Disks/Mass storage - Requires scbus and da
device		ums		# Mouse
device		urio		# Diamond Rio 500 MP3 player
device		uscanner	# Scanners

device		aue		# ADMtek USB ethernet
device		axe		# ASIX Electronics USB ethernet
device		cue		# CATC USB ethernet
device		kue		# Kawasaki LSI USB ethernet


device 		acpi


options PFIL_HOOKS
options RANDOM_IP_ID






Fatal trap 12: page fault while in kernel mode
fault virtual address   = 0xa32e8266
fault code              = supervisor read, page not present
instruction pointer     = 0x8:0xc06c4132
stack pointer           = 0x10:0xe13bdb88
frame pointer           = 0x10:0xe13bdbc4
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 602 (ndis taskqueue)
panic: from debugger
at line 450 in file /usr/src/sys/ddb/db_command.c


Fatal trap 3: breakpoint instruction fault while in kernel mode
instruction pointer     = 0x8:0xc06b5d84
stack pointer           = 0x10:0xe13bd910
frame pointer           = 0x10:0xe13bd91c
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = IOPL = 0
current process         = 602 (ndis taskqueue)
panic: from debugger
at line 450 in file /usr/src/sys/ddb/db_command.cUptime: 9m56s
Dumping 503 MB
 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 256 272 288 304
320 336 352 368 384 400 416 432 448 464 480 496
---
Reading symbols from /boot/kernel/pf.ko...done.
Loaded symbols for /boot/kernel/pf.ko
Reading symbols from /boot/kernel/pfsync.ko...done.
Loaded symbols for /boot/kernel/pfsync.ko
Reading symbols from /boot/kernel/pflog.ko...done.
Loaded symbols for /boot/kernel/pflog.ko
Reading symbols from
/usr/obj/usr/src/sys/DEBUG/modules/usr/src/sys/modules/linprocfs/linprocfs.ko.debug...done.
Loaded symbols for
/usr/obj/usr/src/sys/DEBUG/modules/usr/src/sys/modules/linprocfs/linprocfs.ko.debug
Reading symbols from
/usr/obj/usr/src/sys/DEBUG/modules/usr/src/sys/modules/linux/linux.ko.debug...done.
Loaded symbols for
/usr/obj/usr/src/sys/DEBUG/modules/usr/src/sys/modules/linux/linux.ko.debug
Reading symbols from /boot/kernel/blank_saver.ko...done.
Loaded symbols for /boot/kernel/blank_saver.ko
Reading symbols from /boot/kernel/if_ndis.ko...done.
Loaded symbols for /boot/kernel/if_ndis.ko
Reading symbols from
/usr/obj/usr/src/sys/DEBUG/modules/usr/src/sys/modules/ndis/ndis.ko.debug...done.
Loaded symbols for
/usr/obj/usr/src/sys/DEBUG/modules/usr/src/sys/modules/ndis/ndis.ko.debug
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
240             dumping++;
(kgdb) bt
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1  0xc054a8d3 in boot (howto=260) at
/usr/src/sys/kern/kern_shutdown.c:374
#2  0xc054ac97 in __panic () at /usr/src/sys/kern/kern_shutdown.c:552
#3  0xc046f9d2 in db_panic () at /usr/src/sys/ddb/db_command.c:450
#4  0xc046f922 in db_command (last_cmdp=0xc075d300, cmd_table=0x0,
aux_cmd_tablep=0xc0727ea0, aux_cmd_tablep_end=0xc0727ea4) at
/usr/src/sys/ddb/db_command.c:346
#5  0xc046fa75 in db_command_loop () at
/usr/src/sys/ddb/db_command.c:472
#6  0xc0472a85 in db_trap (type=12, code=0) at
/usr/src/sys/ddb/db_trap.c:73
#7  0xc06b5acc in kdb_trap (type=12, code=0, regs=0xe13bdb48) at
/usr/src/sys/i386/i386/db_interface.c:171
#8  0xc06c5ec6 in trap_fatal (frame=0xe13bdb48, eva=0) at
/usr/src/sys/i386/i386/trap.c:816
#9  0xc06c5b92 in trap_pfault (frame=0xe13bdb48, usermode=0,
eva=2737734246) at /usr/src/sys/i386/i386/trap.c:735
#10 0xc06c5753 in trap (frame=
      {tf_fs = -1066401768, tf_es = 16, tf_ds = -998244336, tf_edi =
-1557233050, tf_esi = -516170840, tf_ebp = -516170812, tf_isp =
-516170892, tf_ebx = -1557233054, tf_edx = 6, tf_ecx = 1, tf_eax = 0,
tf_trapno = 12, tf_err = 0, tf_eip = -1066647246, tf_cs = 8, tf_eflags =
66051, tf_esp = 1, tf_ss = -998194816})
    at /usr/src/sys/i386/i386/trap.c:420
#11 0xc06c4132 in bcmp () at {standard input}:660
#12 0xc493c52c in ndis_getstate_80211 () from /boot/kernel/if_ndis.ko
#13 0xc493b586 in ndis_ticktask () from /boot/kernel/if_ndis.ko
#14 0xc4c0ba25 in ndis_runq (arg=0xc4c0fb50) at
/usr/src/sys/compat/ndis/kern_ndis.c:222
#15 0xc0535794 in fork_exit (callout=0xc4c0b950 <ndis_runq>, arg=0x0,
frame=0x0) at /usr/src/sys/kern/kern_fork.c:799
(kgdb) l
235     static void
236     doadump(void)
237     {
238     
239             savectx(&dumppcb);
240             dumping++;
241             dumpsys(&dumper);
242     }
243     
244     /*
(kgdb) 
Received on Mon Jan 26 2004 - 11:20:05 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:37:40 UTC