Subject: atu(4) crashes on current
To: None <>
From: =?ISO-8859-1?Q?St=E9phane?= Witzmann <>
List: current-users
Date: 12/20/2005 00:50:04
See my previous post at:

Briefly, "ifconfig atu0 inet <whatever>" produces a kernel page fault (even
with the latest binary kernel snapshot (200512180000Z)). It doesn't crash
under NetBSD 3.0RC5.

I took a closer look at it today, so here are the results. The fault occurs
in atu_initial_config(), at:
switch (ic->ic_nw_keys[ic->ic_def_txkey].wk_keylen)

At this time, ic->ic_def_txkey = 65535 (= IEEE80211_KEYIX_NONE, most
probably initialized by ieee80211_crypto_attach()), which is far beyond the
end of the array (size: IEEE80211_WEP_NKID = 4).

Should I send a PR or does somebody have a fix ?