NetBSD Problem Report #31989

From dogcow@babymeat.com  Thu Nov  3 12:10:09 2005
Return-Path: <dogcow@babymeat.com>
Received: from a.mail.sonic.net (a.mail.sonic.net [64.142.16.245])
	by narn.netbsd.org (Postfix) with ESMTP id A613B63B8E4
	for <gnats-bugs@gnats.netbsd.org>; Thu,  3 Nov 2005 12:10:08 +0000 (UTC)
Message-Id: <200511031208.jA3C8UIQ007552@a.mail.sonic.net>
Date: Thu, 3 Nov 2005 04:08:30 -0800
From: <dogcow@babymeat.com>
Reply-To: dogcow@babymeat.com
To: gnats-bugs@netbsd.org
Subject: insertion of pcmcia card causes panic
X-Send-Pr-Version: 3.95

>Number:         31989
>Category:       kern
>Synopsis:       insertion of pcmcia card causes panic
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Nov 03 12:11:00 +0000 2005
>Originator:     moof
>Release:        NetBSD 3.99.11
>Organization:

>Environment:


System: NetBSD craptop.babymeat.com 3.99.11 NetBSD 3.99.11 (DEBUGCREPIT) #0: Thu Nov 3 02:22:31 PST 2005 dogcow@:/usr/home/dogcow/obj/obj/usr/src/sys/arch/i386/compile/DEBUGCREPIT i386
Architecture: i386
Machine: i386
>Description:

Upon insertion of a crappy ACX100 (IIRC) network card, I get a rather
nasty and immediate panic:

cbb0: wait took 0.007879s
cardbus_mapreg_map called: cardbus0 0
cardbus_mapreg_map: physaddr 40000000
uvm_fault(0xc037cdc0, 0xca9ae000, 0, 1) -> 0xe
fatal page fault in supervisor mode
trap type 6 code 0 eip c02d0c97 cs 8 eflags 10287 cr2 ca9ae000 ilevel 0
panic: trap
Begin traceback...
trap() at netbsd:trap+0x16c
--- trap (number 6) ---
cardbus_read_tuples(ca992584,ca9adc00,ca992724,800,0) at netbsd:cardbus_read_tuples+0x237

and from gdb:

(gdb) up
#5  0xc02d1658 in cardbus_rescan (self=0xc0918900, 
    ifattr=0xc0314d5e "cardbus", locators=0xc0365dc8)
    at /usr/src/sys/dev/cardbus/cardbus.c:570
569                     if (cis_ptr != 0) {
570                             if (cardbus_read_tuples(&ca, cis_ptr,
571                                 tuple, sizeof(tuple))) {
572                                     printf("cardbus_attach_card: "
573                                         "failed to read CIS\n");

(gdb) print cis_ptr
$1 = 3074

the cis_ptr value looks suspicious.
>How-To-Repeat:

Insert said card into my Toshiba Tecra 8000 laptop.
>Fix:

Workaround: "don't do that."

>Unformatted:

Home	PR Database Search