OpenSolaris

Printable Version Enter a New Search
Bug ID 6562292
Synopsis race between drv_getparm and setpgrp leads to panic
State 10-Fix Delivered (Fix available in build)
Category:Subcategory kernel:other
Keywords kern_comm | rtiq_reviewed
Responsible Engineer Narayana Kadoor
Reported Against
Duplicate Of
Introduced In
Commit to Fix snv_70
Fixed In snv_70
Release Fixed solaris_nevada(snv_70) , solaris_10u5(s10u5_04) (Bug ID:2155429)
Related Bugs
Submit Date 25-May-2007
Last Update Date 13-December-2007
Description
The system panics at offset 0x4 from a null pointer as follows:

unix:panicsys+0x44(0x105cf38, 0x2a10352ef88, 0x1438390, 0x1, 0x336f00000000, 0x3
36f00db73fe, 0x9900001605, , , , , , , , 0x105cf38, 0x2a10352ef88)
unix:vpanic+0xcc(0x105cf38, 0x2a10352ef88, 0x23, 0x1, 0x8, 0x8)
unix:panic+0x1c(0x105cf38, 0x31, 0x2a10352f1e0, 0x4, 0x0, 0x1440088, 0x1413848)
unix:die+0x80(0x31, 0x2a10352f1e0, 0x4, 0x0, 0x8, 0x8)
unix:trap+0x8a4(0x2a10352f1e0, 0x4, , , 0x0, 0x0)
unix:ktl0+0x48()
-- trap data  type: 0x31 (data access MMU miss)  rp: 0x2a10352f1e0  --
  addr: 0x4
pc:  0x108cb38 genunix:drv_getparm+0x58:   lduw [%g2 + 0x4], %g2
npc: 0x108cb3c genunix:drv_getparm+0x5c:   stw    %g2, [%i1]
  global:                       %g1             0x336f
        %g2                  0  %g3                0x3
        %g4          0x108caac  %g5          0x108caac
        %g6                  0  %g7      0x30027661a40
  out:  %o0                  0  %o1                0x1
        %o2                0x1  %o3                  0
        %o4            0xf9380  %o5                  0
        %sp      0x2a10352ea81  %o7          0x102e17c
  loc:  %l0                  0  %l1          0x100c9bc
        %l2      0x36befb88078  %l3               0x31
        %l4                  0  %l5                0x1
        %l6                  0  %l7                  0
  in:   %i0                0x3  %i1      0x2a10352f3ec
        %i2                  0  %i3                  0
        %i4                  0  %i5         0x7827bc00
        %fp      0x2a10352eb31  %i7         0x785d266c
<trap>genunix:drv_getparm+0x58(0x3, 0x2a10352f3ec, 0x0, 0x0, 0x0, 0x7827bc
00)
tlmkagent-2_1_0_0:sendRequestAndWait+0x38(0x2a10352f4a8, 0x2a10352f4a4)
tlmkagent-2_1_0_0:our_execve+0x1c4(, 0x3962e8, 0x39adf0, 0x1099f80)
unix:syscall_trap32+0xa8()

This stack is from an IBM Tivoli agent and has been seen on various sites, platforms and Solaris releases. The race and panic can be reproduced with a test case which does not use Tivoli.
Work Around
None.
Comments
N/A