From: Dave Jones <davej@redhat.com>
To: David Ford <david+challenge-response@blue-labs.org>
Cc: linux-kernel mailing list <linux-kernel@vger.kernel.org>
Subject: Re: ov511 [2.6.7-rc3] does something odd
Date: Wed, 16 Jun 2004 14:25:41 +0100 [thread overview]
Message-ID: <20040616132541.GA438@redhat.com> (raw)
In-Reply-To: <40CF8846.7020309@blue-labs.org>
On Tue, Jun 15, 2004 at 07:37:42PM -0400, David Ford wrote:
> RIP: 0010:[<ffffffff803a9906>] <ffffffff803a9906>{ov51x_v4l1_ioctl+38}
>...
> Call Trace:<ffffffff801ad8bd>{sys_ioctl+685}
> <ffffffff8011221a>{system_call+126}
>
> Code: ff 8d a8 00 00 00 0f 88 8a 2c 00 00 31 c0 85 c0 41 b8 fc ff
> RIP <ffffffff803a9906>{ov51x_v4l1_ioctl+38} RSP <000001003c4edf18>
Interesting. I broke it in what looks like the same way on x86
last week..
Unable to handle kernel paging request at virtual address 6b6b6bff
printing eip:
6306ba4d
*pde = 00000000
Oops: 0002 [#1]
SMP
Modules linked in: ov511 videodev floppy uhci_hcd snd_pcm_oss loop snd_mixer_oss snd_emu10k1 snd_rawmidi snd_pcm snd_timer sndCPU: 3
EIP: 0060:[<6306ba4d>] Not tainted
EFLAGS: 00010246 (2.6.6-1.381smp)
EIP is at ov51x_v4l1_ioctl+0x2c/0x75 [ov511]
eax: 00000000 ebx: 6b6b6bff ecx: 6b6b6bff edx: 00000091
esi: 6b6b6b6b edi: 367490f4 ebp: 40047612 esp: 05612f78
ds: 007b es: 007b ss: 0068
Process xawtv (pid: 14706, threadinfo=05612000 task=1f2eb3c0)
Stack: 43c6030c 63073820 40047612 367490f4 ffffffe7 0216dc88 08ade2d0 43c6030c
05612000 0212ab53 00000000 00000000 00000000 00000000 05612fc4 08ade038
08ade2d0 05612000 fffeb200 00000004 40047612 08ade2d0 08ade038 08ade2d0
Call Trace:
[<0216dc88>] sys_ioctl+0x23d/0x2a0
[<0212ab53>] sys_alarm+0x30/0x4e
Code: f0 ff 8e 94 00 00 00 0f 88 18 21 00 00 31 c0 85 c0 ba fc ff
I started to look into it, but video_usercopy() gave me the creeps.
OV511 could use a going over with sparse too. I'm not convinced about
its handling of userspace pointers in its ioctl.
Dave
next prev parent reply other threads:[~2004-06-16 13:26 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-06-15 23:37 ov511 [2.6.7-rc3] does something odd David Ford
2004-06-16 13:25 ` Dave Jones [this message]
-- strict thread matches above, loose matches on Subject: below --
2004-06-18 21:19 Venkatesan, Ganesh
2004-06-19 1:59 ` David Ford
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20040616132541.GA438@redhat.com \
--to=davej@redhat.com \
--cc=david+challenge-response@blue-labs.org \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox