From: Dave Jones <davej@redhat.com>
To: David Ford <david+challenge-response@blue-labs.org>
Cc: linux-kernel mailing list <linux-kernel@vger.kernel.org>
Subject: Re: ov511 [2.6.7-rc3] does something odd
Date: Wed, 16 Jun 2004 14:25:41 +0100 [thread overview]
Message-ID: <20040616132541.GA438@redhat.com> (raw)
In-Reply-To: <40CF8846.7020309@blue-labs.org>
On Tue, Jun 15, 2004 at 07:37:42PM -0400, David Ford wrote:
> RIP: 0010:[<ffffffff803a9906>] <ffffffff803a9906>{ov51x_v4l1_ioctl+38}
>...
> Call Trace:<ffffffff801ad8bd>{sys_ioctl+685}
> <ffffffff8011221a>{system_call+126}
>
> Code: ff 8d a8 00 00 00 0f 88 8a 2c 00 00 31 c0 85 c0 41 b8 fc ff
> RIP <ffffffff803a9906>{ov51x_v4l1_ioctl+38} RSP <000001003c4edf18>
Interesting. I broke it in what looks like the same way on x86
last week..
Unable to handle kernel paging request at virtual address 6b6b6bff
printing eip:
6306ba4d
*pde = 00000000
Oops: 0002 [#1]
SMP
Modules linked in: ov511 videodev floppy uhci_hcd snd_pcm_oss loop snd_mixer_oss snd_emu10k1 snd_rawmidi snd_pcm snd_timer sndCPU: 3
EIP: 0060:[<6306ba4d>] Not tainted
EFLAGS: 00010246 (2.6.6-1.381smp)
EIP is at ov51x_v4l1_ioctl+0x2c/0x75 [ov511]
eax: 00000000 ebx: 6b6b6bff ecx: 6b6b6bff edx: 00000091
esi: 6b6b6b6b edi: 367490f4 ebp: 40047612 esp: 05612f78
ds: 007b es: 007b ss: 0068
Process xawtv (pid: 14706, threadinfo=05612000 task=1f2eb3c0)
Stack: 43c6030c 63073820 40047612 367490f4 ffffffe7 0216dc88 08ade2d0 43c6030c
05612000 0212ab53 00000000 00000000 00000000 00000000 05612fc4 08ade038
08ade2d0 05612000 fffeb200 00000004 40047612 08ade2d0 08ade038 08ade2d0
Call Trace:
[<0216dc88>] sys_ioctl+0x23d/0x2a0
[<0212ab53>] sys_alarm+0x30/0x4e
Code: f0 ff 8e 94 00 00 00 0f 88 18 21 00 00 31 c0 85 c0 ba fc ff
I started to look into it, but video_usercopy() gave me the creeps.
OV511 could use a going over with sparse too. I'm not convinced about
its handling of userspace pointers in its ioctl.
Dave
next prev parent reply other threads:[~2004-06-16 13:26 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-06-15 23:37 ov511 [2.6.7-rc3] does something odd David Ford
2004-06-16 13:25 ` Dave Jones [this message]
-- strict thread matches above, loose matches on Subject: below --
2004-06-18 21:19 Venkatesan, Ganesh
2004-06-19 1:59 ` David Ford
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20040616132541.GA438@redhat.com \
--to=davej@redhat.com \
--cc=david+challenge-response@blue-labs.org \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.