From: Al Viro <viro@ftp.linux.org.uk>
To: Douglas Gilbert <dougg@torque.net>
Cc: Stefan Richter <stefanr@s5r6.in-berlin.de>,
linux-scsi@vger.kernel.org,
linux1394-devel@lists.sourceforge.net
Subject: Re: Fw: [Bugme-new] [Bug 6114] New: Initio sbp2 causes: "slab error in cache_free_debugcheck(): cache `size-512(DMA)': double free, or memory outside" object was overwritten
Date: Wed, 22 Feb 2006 01:20:58 +0000 [thread overview]
Message-ID: <20060222012057.GX27946@ftp.linux.org.uk> (raw)
In-Reply-To: <43FBB608.5060202@torque.net>
On Tue, Feb 21, 2006 at 07:53:28PM -0500, Douglas Gilbert wrote:
> Stefan Richter wrote:
>
> > What I don't understand is why mode page 8 is still accessed in your
> > log: http://bugzilla.kernel.org/attachment.cgi?id=7432&action=view
> > (Log lines "command: Mode Sense (10): 5a 00 08 00 00 00 00 00 d9 00",
> > "SCSI transfer size = 17d9" --- yeah, into a 512 Bytes big buffer, "sda:
> > got wrong page".)
>
> Stefan,
> That sounds familiar. My guess is that a MODE SENSE (6)
> response is being returned for a MODE SENSE (10) cdb.
> "sdparm -f" can decode that in some contexts.
No. It's a broken bridge that replies to _everything_ with page 6 and
doesn't return a header at all - not 4 bytes for MODE SENSE(6), not
8 bytes for MODE SENSE(10), *zero* bytes. Just the page 6 contents.
So in place of block descriptor length (offsets 6 and 7) you get the
part of page 6 body. Which is going to be bits 31..16 of size in blocks.
And that's going to be 0x17bd in his case (203928MB/0.5KB/65536).
next prev parent reply other threads:[~2006-02-22 1:21 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-02-22 0:53 Fw: [Bugme-new] [Bug 6114] New: Initio sbp2 causes: "slab error in cache_free_debugcheck(): cache `size-512(DMA)': double free, or memory outside" object was overwritten Douglas Gilbert
2006-02-22 1:20 ` Al Viro [this message]
2006-02-22 2:39 ` Douglas Gilbert
2006-02-22 3:25 ` Al Viro
[not found] <20060221040511.35b69d26.akpm@osdl.org>
[not found] ` <43FB6545.8080103@s5r6.in-berlin.de>
[not found] ` <43FB67BD.7030101@s5r6.in-berlin.de>
[not found] ` <20060221134543.5f844d7c.akpm@osdl.org>
[not found] ` <43FB9FE5.8070309@s5r6.in-berlin.de>
[not found] ` <Pine.LNX.4.64.0602220041070.21474@jbgna.fhfr.qr>
2006-02-22 0:34 ` Stefan Richter
2006-02-22 1:29 ` Al Viro
2006-02-22 6:05 ` Stefan Richter
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20060222012057.GX27946@ftp.linux.org.uk \
--to=viro@ftp.linux.org.uk \
--cc=dougg@torque.net \
--cc=linux-scsi@vger.kernel.org \
--cc=linux1394-devel@lists.sourceforge.net \
--cc=stefanr@s5r6.in-berlin.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox