From: Al Viro <viro@ftp.linux.org.uk>
To: Douglas Gilbert <dougg@torque.net>
Cc: Stefan Richter <stefanr@s5r6.in-berlin.de>,
linux-scsi@vger.kernel.org,
linux1394-devel@lists.sourceforge.net
Subject: Re: Fw: [Bugme-new] [Bug 6114] New: Initio sbp2 causes: "slab error in cache_free_debugcheck(): cache `size-512(DMA)': double free, or memory outside" object was overwritten
Date: Wed, 22 Feb 2006 01:20:58 +0000 [thread overview]
Message-ID: <20060222012057.GX27946@ftp.linux.org.uk> (raw)
In-Reply-To: <43FBB608.5060202@torque.net>
On Tue, Feb 21, 2006 at 07:53:28PM -0500, Douglas Gilbert wrote:
> Stefan Richter wrote:
>
> > What I don't understand is why mode page 8 is still accessed in your
> > log: http://bugzilla.kernel.org/attachment.cgi?id=7432&action=view
> > (Log lines "command: Mode Sense (10): 5a 00 08 00 00 00 00 00 d9 00",
> > "SCSI transfer size = 17d9" --- yeah, into a 512 Bytes big buffer, "sda:
> > got wrong page".)
>
> Stefan,
> That sounds familiar. My guess is that a MODE SENSE (6)
> response is being returned for a MODE SENSE (10) cdb.
> "sdparm -f" can decode that in some contexts.
No. It's a broken bridge that replies to _everything_ with page 6 and
doesn't return a header at all - not 4 bytes for MODE SENSE(6), not
8 bytes for MODE SENSE(10), *zero* bytes. Just the page 6 contents.
So in place of block descriptor length (offsets 6 and 7) you get the
part of page 6 body. Which is going to be bits 31..16 of size in blocks.
And that's going to be 0x17bd in his case (203928MB/0.5KB/65536).
next prev parent reply other threads:[~2006-02-22 1:21 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-02-22 0:53 Fw: [Bugme-new] [Bug 6114] New: Initio sbp2 causes: "slab error in cache_free_debugcheck(): cache `size-512(DMA)': double free, or memory outside" object was overwritten Douglas Gilbert
2006-02-22 1:20 ` Al Viro [this message]
2006-02-22 2:39 ` Douglas Gilbert
2006-02-22 3:25 ` Al Viro
[not found] <20060221040511.35b69d26.akpm@osdl.org>
[not found] ` <43FB6545.8080103@s5r6.in-berlin.de>
[not found] ` <43FB67BD.7030101@s5r6.in-berlin.de>
[not found] ` <20060221134543.5f844d7c.akpm@osdl.org>
[not found] ` <43FB9FE5.8070309@s5r6.in-berlin.de>
[not found] ` <Pine.LNX.4.64.0602220041070.21474@jbgna.fhfr.qr>
2006-02-22 0:34 ` Stefan Richter
2006-02-22 1:29 ` Al Viro
2006-02-22 6:05 ` Stefan Richter
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20060222012057.GX27946@ftp.linux.org.uk \
--to=viro@ftp.linux.org.uk \
--cc=dougg@torque.net \
--cc=linux-scsi@vger.kernel.org \
--cc=linux1394-devel@lists.sourceforge.net \
--cc=stefanr@s5r6.in-berlin.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.