Re: port-cobalt/38391: Recently imported OpenSSH 5.0 crashes cobalt kernel via its sshd binary

[christos%zoulas.com@localhost (Christos Zoulas)]

On Apr 16, 12:41am, tsutsui%ceres.dti.ne.jp@localhost (Izumi Tsutsui) wrote:
-- Subject: Re: port-cobalt/38391: Recently imported OpenSSH 5.0 crashes coba

| christos%zoulas.com@localhost wrote:
| 
| > I think it is file descriptor stuff. Try a Feb-15 kernel.
| 
| On RaQ1, with userland fetched from NetBSD-daily/HEAD/200804080000Z,
| today's (2008/04/15 ~14:40 UTC) kernel:
| ---
| Enter passphrase for key '/home/tsutsui/.ssh/id_rsa': 
| trap: address error (load or I-fetch) in kernel mode
| status=0xfc03, cause=0x10, epc=0x8028f7fc, vaddr=0x23
| pid=596 cmd=sshd usp=0x7fffcdc0 ksp=0xc6889c88
| Stopped in pid 596.1 (sshd) at  netbsd:mutex_enter:     ll      t0,a0,0
| db> tr
| mutex_enter+0 (23,802403f0,1,0) ra 80240418 sz 0
| unp_discard+28 (23,802403f0,1,0) ra 802405f0 sz 32
| unp_scan+ec (23,802403f0,1,0) ra 80242498 sz 48
| uipc_usrreq+210 (23,802403f0,1,0) ra 8023b7cc sz 56
| sosend+4b8 (82daf138,0,c6889e18,83a76e00) ra 8023f3ec sz 88
| do_sys_sendmsg+344 (82daf138,0,c6889e18,83a76e00) ra 8023f534 sz 192
| sys_sendmsg+5c (82daf138,0,c6889e18,83a76e00) ra 80294d50 sz 80
| syscall_plain+130 (82daf138,0,c6889e18,83a76e00) ra 8028e8fc sz 80
| mips3_SystemCall+bc (82daf138,0,c6889e18,83a76e00) ra 7d72caf0 sz 0
| PC 0x7d72caf0: not in kernel space
| 0+7d72caf0 (82daf138,0,c6889e18,83a76e00) ra 0 sz 0
| User-level: pid 596.1
| db> 
| ---
| 
| 2008/03/21 00:00:00 UTC kernel:
| ---
| Enter passphrase for key '/home/tsutsui/.ssh/id_rsa': 
| trap: address error (load or I-fetch) in kernel mode
| status=0xfc03, cause=0x10, epc=0x8028c03c, vaddr=0x3b
| pid=563 cmd=sshd usp=0x7fffcdc0 ksp=0xc687bc80
| Stopped in pid 563.1 (sshd) at  netbsd:mutex_enter:     ll      t0,a0,0
| db> tr
| mutex_enter+0 (3b,8023c4f0,1,0) ra 8023c518 sz 0
| unp_discard+28 (3b,8023c4f0,1,0) ra 8023c71c sz 32
| unp_scan+ec (3b,8023c4f0,1,0) ra 8023e6d4 sz 48
| uipc_usrreq+248 (3b,8023c4f0,1,0) ra 80236dd8 sz 56
| sosend+4c8 (82610dc8,0,c687be18,83a8be00) ra 8023b09c sz 96
| do_sys_sendmsg+350 (82610dc8,0,c687be18,83a8be00) ra 8023b22c sz 192
| sys_sendmsg+5c (82610dc8,0,c687be18,83a8be00) ra 80291590 sz 80
| syscall_plain+130 (82610dc8,0,c687be18,83a8be00) ra 8028b13c sz 80
| mips3_SystemCall+bc (82610dc8,0,c687be18,83a8be00) ra 7d72caf0 sz 0
| PC 0x7d72caf0: not in kernel space
| 0+7d72caf0 (82610dc8,0,c687be18,83a8be00) ra 0 sz 0
| User-level: pid 563.1
| db> 
| 
| 2008/02/15 00:00:00 UTC kernel:
| ---
| Enter passphrase for key '/home/tsutsui/.ssh/id_rsa': 
| trap: address error (load or I-fetch) in kernel mode
| status=0xfc03, cause=0x10, epc=0x8028ab8c, vaddr=0x3b
| pid=596 cmd=sshd usp=0x7fffcdc0 ksp=0xc687bc80
| Stopped in pid 596.1 (sshd) at  netbsd:mutex_enter:     ll      t0,a0,0
| db> tr
| mutex_enter+0 (3b,8023b0c0,1,0) ra 8023b0e8 sz 0
| unp_discard+28 (3b,8023b0c0,1,0) ra 8023b2ec sz 32
| unp_scan+ec (3b,8023b0c0,1,0) ra 8023d2a4 sz 48
| uipc_usrreq+248 (3b,8023b0c0,1,0) ra 802359d4 sz 56
| sosend+4c8 (82609dc8,0,c687be18,83a8c500) ra 80239c6c sz 96
| do_sys_sendmsg+350 (82609dc8,0,c687be18,83a8c500) ra 80239dfc sz 192
| sys_sendmsg+5c (82609dc8,0,c687be18,83a8c500) ra 802900e0 sz 80
| syscall_plain+130 (82609dc8,0,c687be18,83a8c500) ra 80289c8c sz 80
| mips3_SystemCall+bc (82609dc8,0,c687be18,83a8c500) ra 7d72caf0 sz 0
| PC 0x7d72caf0: not in kernel space
| 0+7d72caf0 (82609dc8,0,c687be18,83a8c500) ra 0 sz 0
| User-level: pid 596.1
| db> 
| ---
| 
| 2008/01/01 00:00:00 UTC kernel:
| ---
| Enter passphrase for key '/home/tsutsui/.ssh/id_rsa': 
| trap: address error (load or I-fetch) in kernel mode
| status=0xfc03, cause=0x10, epc=0x802852ac, vaddr=0x43
| pid=563 cmd=sshd usp=0x7fffbdc0 ksp=0xc6865c80
| Stopped in pid 563.1 (sshd) at  netbsd:mutex_enter:     ll      t0,a0,0
| db> tr
| mutex_enter+0 (43,80236b10,1,0) ra 80236b38 sz 0
| unp_discard+28 (43,80236b10,1,0) ra 80236d3c sz 32
| unp_scan+ec (43,80236b10,1,0) ra 80238d10 sz 48
| uipc_usrreq+248 (43,80236b10,1,0) ra 80231254 sz 56
| sosend+4c4 (82c24388,0,c6865e18,83a9a300) ra 802356bc sz 96
| do_sys_sendmsg+350 (82c24388,0,c6865e18,83a9a300) ra 8023584c sz 192
| sys_sendmsg+5c (82c24388,0,c6865e18,83a9a300) ra 8028a800 sz 80
| syscall_plain+130 (82c24388,0,c6865e18,83a9a300) ra 802843ac sz 80
| mips3_SystemCall+bc (82c24388,0,c6865e18,83a9a300) ra 7d72caf0 sz 0
| PC 0x7d72caf0: not in kernel space
| 0+7d72caf0 (82c24388,0,c6865e18,83a9a300) ra 0 sz 0
| User-level: pid 563.1
| db> 
| ---
| 
| Hmm...

Andy committed some fixes for unp_discard...

christos