[issue1016] mount_cd9660 crashes the kernel

[VOROSKOI Andras <sinknull@xxxxxxxxxxxxxxxxxxxxxxx>]

New submission from VOROSKOI Andras <voroskoi@gmail.com>:

DragonFly 1.13-DEVELOPMENT #1: Mon May 19 23:26:51 CEST 2008 crashes on a simple
mount_cd9660 /dev/cd0 /mnt/cdrom.

The last commit in this kernel is:
http://repo.or.cz/w/dragonfly.git?a=commit;h=a13a97e518b44d453d9329dbb0909b27c730803d

Here is the error message:

Fatal trap 12: page fault while in kernel mode
fault virtual address = 0x8
fault code            = supervisor read, page not present
instruction pointer   = 0x8:0xc02d3e15
stack pointer         = 0x10:0xca3ed6c8
frame pointer         = 0x10:0xca3ed744
code segment          = base 0x0, limet 0xfffff, type 0x1b
                      = DPL 0, pres 1, def32 1, gran 1
processor eflags      = intercept enabled, resume, IOPL = 0
current process       = 7660 (mount_cd9660)
current thread        = pri 10

kernel: type 12 trap, code 0
Stopped at dsioctl+0x39: movl 0x8(%esi),%ebx
db> trace
dsioctl(snip) at dsioctl+0x39
cdcheckmedia(snip) at cdcheckmedia+0x246
cdopen(snip) at cdopen+0xd0
dev_dopen(snip) at dev_dopen+0x2f
diskopen(snip) at diskopen+0x7d
dev_dopen(snip) at dev_dopen+0x2f
spec_open(snip) at spec_open+0x18b
spec_vnoperate(snip) at spec_vnoperate+0x11
ufs_vnoperatespec(snip) at ufs_vnoperatespec+0x11
vop_open(snip) at vop_open+0x32
vn_open(snip) at vn_open+0x326
kern_open(snip) at kern_open+0x84
sys_open(snip) at sys_open+0x32
syscall2(snip) at syscall2+0x1ec
Xint0x80_syscall() at Xint0x80_syscall+0x36

I was only able to write it down to a piece of paper, hopefully i did not make
any typo. Also i was lazy to add the memory addresses too for the functions, let
me know if you miss them or anything else.

One more thing: using /dev/acd0 works fine.

----------
messages: 4657
nosy: voroskoi
priority: bug
status: unread
title: mount_cd9660 crashes the kernel

_____________________________________________________
DragonFly issue tracker <bugs@lists.dragonflybsd.org>
<https://bugs.dragonflybsd.org/issue1016>
_____________________________________________________