Re: if_wpi panic in 7.0-PRERELEASE

Thanks for that Sam :)

The attached patch (against 1.5.2.1) seems to have fixed my
problems. Does it look ok to everyone? If so, I would like,
if possible, to get it included so other people hopefully
don't run into the same problem.

Cheers,

Sam.

----- Original Message Follows -----
> Sam Banks wrote:
> > Hey all,
> >
> > I have just got myself a new laptop (Dell Vostro 1500)
> > which has an Intel 3945ABG wifi card in it. I am getting
> > frequent kernel panics with the if_wpi driver. 
> >
> > >From the attached kgdb output, it appears that a valid
> > mbuf struct is being passed into tkip_demic but once
> > m_copydata is called (within tkip_demic), it's being
> > passed a null pointer. At least, this is what I can see
> is going on :) >
> > Does anyone have any ideas why this would be happening
> > or any further insight?
> >
> > I've attached what info I think will be helpful but if
> > there's anything else needed, just yell out.
> >
> > Cheers,
> >
> > Sam.
> >
> >
> > FreeBSD wolfie.evil 7.0-PRERELEASE FreeBSD
> > 7.0-PRERELEASE #3: Fri Jan 25 17:35:41 NZDT 2008    
> > root_at_wolfie.evil:/usr/src/sys/i386/compile/WOLFIE  i386
> >
> >
> > wpi0_at_pci0:12:0:0:       class=0x028000
card=0x10208086
> > chip=0x42228086 rev=0x02 hdr=0x00
> >     vendor     = 'Intel Corporation'
> >     device     = '10418086 Intel 3945ABG Wireless LAN
> > controller'
> >     class      = network
> >
> >
> > Fatal trap 12: page fault while in kernel mode
> > cpuid = 0; apic id = 00
> > fault virtual address   = 0xc
> > fault code              = supervisor read, page not
> > present
> > instruction pointer     = 0x20:0xc0597e0f
> > stack pointer           = 0x28:0xe59c0b00
> > frame pointer           = 0x28:0xe59c0b18
> > code segment            = base 0x0, limit 0xfffff,
type
> > 0x1b
> >                         = DPL 0, pres 1, def32 1, gran
1
> > processor eflags        = interrupt enabled, resume,
> > IOPL = 0
> > current process         = 34 (irq17: wpi0 bfe0+)
> > panic: from debugger
> > cpuid = 0
> > Uptime: 16s
> > Physical memory: 2034 MB
> > Dumping 72 MB: 57 41 25 9
> >
> > #0  doadump () at pcpu.h:195
> > 195     pcpu.h: No such file or directory.
> >         in pcpu.h
> > (kgdb) bt
> > #0  doadump () at pcpu.h:195
> > #1  0xc054d14a in boot (howto=260) at
> > ./../../kern/kern_shutdown.c:409
> > #2  0xc054d44f in panic (fmt=Variable "fmt" is not
> > available.
> > ) at ../../../kern/kern_shutdown.c:563
> > #3  0xc044ad49 in db_panic (addr=Could not find the
> > frame base for "db_panic".
> > ) at ../../../ddb/db_command.c:433
> > #4  0xc044b44c in db_command_loop () at
> > ./../../ddb/db_command.c:401
> > #5  0xc044cd28 in db_trap (type=12, code=0) at
> > ./../../ddb/db_main.c:222
> > #6  0xc0573c18 in kdb_trap (type=12, code=0,
> > tf=dwarf2_read_address: Corrupted DWARF expression.
> > ) at ../../../kern/subr_kdb.c:502
> > #7  0xc06cd159 in trap_fatal (frame=0xe59c0ac0,
eva=12)
> > at ../../../i386/i386/trap.c:890
> > #8  0xc06cd40e in trap_pfault (frame=0xe59c0ac0,
> > usermode=0, eva=12) at ../../../i386/i386/trap.c:812
> > #9  0xc06cdddb in trap (frame=0xe59c0ac0) at
> > ./../../i386/i386/trap.c:490
> > #10 0xc06b502b in calltrap () at
> > ./../../i386/i386/exception.s:139
> > #11 0xc0597e0f in m_copydata (m=0x0, off=4, len=8,
> > cp=0xe59c0b38 "¤ðiÅ