NetBSD Problem Report #23203
Received: (qmail 26972 invoked by uid 605); 20 Oct 2003 03:50:20 -0000
Message-Id: <20031020035018.BF0621E10E6@yeah-baby.shagadelic.org>
Date: Sun, 19 Oct 2003 20:50:18 -0700 (PDT)
From: thorpej@shagadelic.org
Sender: gnats-bugs-owner@NetBSD.org
Reply-To: thorpej@shagadelic.org
To: gnats-bugs@gnats.netbsd.org
Subject: sysctl_rtable can deplete the kmem_map
X-Send-Pr-Version: 3.95
>Number: 23203
>Category: kern
>Synopsis: sysctl_rtable can deplete the kmem_map
>Confidential: no
>Severity: critical
>Priority: high
>Responsible: kern-bug-people
>State: open
>Class: sw-bug
>Submitter-Id: net
>Arrival-Date: Mon Oct 20 03:51:00 +0000 2003
>Closed-Date:
>Last-Modified:
>Originator: Jason R Thorpe
>Release: NetBSD 1.6ZC
>Organization:
-- Jason R. Thorpe <thorpej@shagadelic.org>
>Environment:
System: NetBSD gw-wlan.shagadelic.org 1.6ZC NetBSD 1.6ZC (SHAG-NET4501) #85: Sat Sep 27 13:26:06 PDT 2003 thorpej@yeah-baby.shagadelic.org:/u1/netbsd/src/sys/arch/i386/compile/SHAG-NET4501 i386
Architecture: i386
Machine: i386
>Description:
I have experienced several crashes of my NetBSD-based 802.11 AP
today. All of them were "out of space in kmem_map" panics, and
all of them had sysctl_rtable() in the stack trace.
Upon looking at the code for sysctl_rtable() it does appear as
though it will loop, allocating memory effectively without bound,
as a temporary buffer.
>How-To-Repeat:
Sorry, I don't have a precise set of steps for preproducing the
problem. This AP has been running fine for quite some time, but
started acting up just today.
>Fix:
Unknown.
>Release-Note:
>Audit-Trail:
>Unformatted:
(Contact us)
$NetBSD: query-full-pr,v 1.39 2013/11/01 18:47:49 spz Exp $
$NetBSD: gnats_config.sh,v 1.8 2006/05/07 09:23:38 tsutsui Exp $
Copyright © 1994-2007
The NetBSD Foundation, Inc. ALL RIGHTS RESERVED.