Re: panic using firefox

[Robert Swindells <rjs%fdy2.co.uk@localhost>]

Patrick Welche wrote:
>With a amd64 kernel built from Mar 28 16:05 GMT source, I just saw:

[snip]

>(gdb) frame 5
>#5  0xffffffff8054547a in filt_sordetach (kn=0xfffffe804e698780)
>    at ../../../../kern/uipc_socket.c:2250
>2250            SLIST_REMOVE(&so->so_rcv.sb_sel.sel_klist, kn, knote, kn_selnext);
>(gdb) list
>2245    {
>2246            struct socket   *so;
>2247    
>2248            so = ((file_t *)kn->kn_obj)->f_socket;
>2249            solock(so);
>2250            SLIST_REMOVE(&so->so_rcv.sb_sel.sel_klist, kn, knote, kn_selnext);
>2251            if (SLIST_EMPTY(&so->so_rcv.sb_sel.sel_klist))
>2252                    so->so_rcv.sb_flags &= ~SB_KNOTE;
>2253            sounlock(so);
>2254    }

I have seen the same crash twice with sources from Apr 11, I have
crash dumps but the kernel wasn't a debug build.

Looking at the firefox sources the call to kevent(2) is presumably from:

ipc/chromium/src/third_party/libevent/kqueue.c

I guess it could be interesting to look at the fields of the socket
struct.

Robert Swindells