>Number:         17114
>Category:       kern
>Synopsis:       The neo(4) driver is broken
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri May 31 04:24:02 PDT 2002
>Closed-Date:
>Last-Modified:
>Originator:     Lennart Augustsson
>Release:        NetBSD 1.5ZC
>Organization:
>Environment:
System: NetBSD arne 1.5ZC NetBSD 1.5ZC (ARNE) #1: Sun May 19 10:52:07 MDT 2002 lennart@arne:/usr/SRC/src/sys/arch/i386/compile/ARNE i386
Architecture: i386
Machine: i386
>Description:
	The neo(4) driver uses the bus_space_vaddr() function to get the
	kva of a buffer.  This is dangerous practice, since the buffer
	might not be allocated linearly and then the operation silently
	fails.  There should at least be some attempt at mapping the
	buffer linearly and an error message if it fails.
>How-To-Repeat:
	Code inspection.
>Fix:
	None provided.
>Release-Note:
>Audit-Trail:
>Unformatted: