>Number:         552
>Category:       port-i386
>Synopsis:       speaker driver panics kernel
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    gnats-admin (GNATS administrator)
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Nov  3 12:20:03 1994
>Originator:     James Graham (greywolf@autodesk.com)
>Organization:
Autodesk, Inc.
>Release:        1.0
>Environment:
>	Hardware: Compaq Deskpro/66M (486DX), 2x(fd), IDE/ESDI/ST506, AHA1540CF
System:  NetBSD deep_thought 1.0 NetBSD 1.0 (DEEP_THOUGHT) #2: Fri Oct 28 15:37:42 PDT 1994 greywolf@deep_thought:/usr/src/sys/arch/i386/compile/DEEP_THOUGHT i386

>Description:
	If you cat to /dev/speaker and start feeding it control sequences
	to play notes, eventually it crashes with the message:

		Fatal integer overflow in supervisor mode

	and proceeds to dump core.  Never mind that savecore can't decode
	the core which is dumped (that's another bug)
>How-To-Repeat:
	cat > /dev/speaker
	>c>c>c>c>c>c>c>c>cdefgab>c

>Fix:
	unknown.
>Audit-Trail:
>Unformatted: