From mboxrd@z Thu Jan 1 00:00:00 1970 From: Christoph Lameter Subject: Re: [bug, netconsole, SLUB] BUG skbuff_head_cache: Poison overwritten Date: Mon, 21 Jul 2008 11:22:27 -0500 Message-ID: <4884B7C3.9040801@linux-foundation.org> References: <20080717214222.GA29449@elte.hu> <20080718091146.GQ6875@elte.hu> <20080721094110.GA16029@elte.hu> <84144f020807210252k68d5cf65i8c7ae3c11cecc046@mail.gmail.com> <20080721100627.GA5953@2ka.mipt.ru> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: Pekka Enberg , Ingo Molnar , linux-kernel@vger.kernel.org, netdev@vger.kernel.org, Vegard Nossum , "Rafael J. Wysocki" , davem@davemloft.net To: Evgeniy Polyakov Return-path: Received: from smtp1.linux-foundation.org ([140.211.169.13]:46216 "EHLO smtp1.linux-foundation.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751899AbYGUQXA (ORCPT ); Mon, 21 Jul 2008 12:23:00 -0400 In-Reply-To: <20080721100627.GA5953@2ka.mipt.ru> Sender: netdev-owner@vger.kernel.org List-ID: Evgeniy Polyakov wrote: > Not that obvious... > skb->next is cleared in lots of places, in xmit network helper > for example, but since rest of the packet was not modified, it > means given skb was not freed, so it will not help. > > The skb was definitely freed. 6b is written over an object when it is freed. Something else retained a pointer to the skb and was confident that the skb still exists.