Re: Potential re(4) / netbsd-4 / i386 problem?

[Manuel Bouyer <bouyer%antioche.eu.org@localhost>]

On Wed, Jul 21, 2010 at 02:06:11PM +0200, Brad du Plessis wrote:
> I've managed to reproduce this now in netbsd-5 too (source is about
> 3 months old, not sure if there have been any changes since):
> 
> re0: discarding oversize frame (len=9041)
> re0: discarding oversize frame (len=16158)
> panic: kernel diagnostic assertion "pcg->pcg_avail == 0" failed:
> file "../../../../kern_subr_pool.c", line 2580
> 
> 
> As I think I've said before, the actual crash point is different
> every time but the panic is always preceded by the discarding
> oversize frame. Sometimes the len in the oversize frame message
> is len=-1.

is it possible that the re device is writting past its buffer (via DMA) and
overwriting random memory ?

-- 
Manuel Bouyer <bouyer%antioche.eu.org@localhost>
     NetBSD: 26 ans d'experience feront toujours la difference
--