>Number:         3700
>Category:       kern
>Synopsis:       if_de bug; system fall into ddb on startup if it is diskless, network interface is de0 and connected using 10baseT (and TULIP_DEBUG is not defined).
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    kern-bug-people (Kernel Bug People)
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Jun  3 08:05:00 1997
>Last-Modified:
>Originator:     enami tsugutomo
>Organization:
>Release:        NetBSD-current
>Environment:
System: NetBSD decoy.enami.ba2.so-net.or.jp 1.2E NetBSD 1.2E (DECOY) #109: Tue Jun 3 21:32:00 JST 1997 enami@pavlov.enami.ba2.so-net.or.jp:/b/netbsd/kernel/compile/DECOY i386

Network interface is DEC DE-500AA.

>Description:
	System fall into ddb on startup if it is diskless, network
	interface is de0 and connected using 10baseT (unless TULIP_DEBUG
	is not defined).

	Precise environment is:

		Uses DEC DE-500AA.
		Boot block is of sys/arc/i386/stand.
		Boot block (biosboot) is installed in fd0 (1440k floppy).
		Kernel is configued with netbsd on ? type nfs.

>How-To-Repeat:
	Direct reason to fail is in function tulip_2114x_media_present,
	the variable `media' is 0x0c (TULIP_MEDIA_MAX) and access to
	sc->tulip_mediums[] becomes out of range.

	Here is a dmesg when TULIP_DEBUG is defined (if it is defined,
	system doesn't fall into ddb, but note that `media' is actually 12).

NetBSD 1.2E (DECOY) #109: Tue Jun  3 21:32:00 JST 1997
    enami@pavlov.enami.ba2.so-net.or.jp:/b/netbsd/kernel/compile/DECOY
cpu0: family 4 model 8 step 0
cpu0: Intel 486DX4 (486-class)
real mem  = 16384000
avail mem = 14008320
using 225 buffers containing 921600 bytes of memory
mainbus0 (root)
pci0 at mainbus0 bus 0: configuration mode 1
Silicon Integrated System 85C496 (host bridge, revision 0x31) at pci0 dev 5 function 0 not configured
de0 at pci0 dev 11 function 0 at irq 11
de0: DEC DE500-AA 21140A [10-100Mb/s] pass 2.0
de0: address 00:00:f8:1e:38:1f
isa0 at mainbus0
com0 at isa0 port 0x3f8-0x3ff irq 4: ns16550a, working fifo
com1 at isa0 port 0x2f8-0x2ff irq 3: ns16550a, working fifo
com2 at isa0 port 0x3e8-0x3ef irq 5: ESP, 1024 byte fifo
lpt0 at isa0 port 0x378-0x37b irq 7
npx0 at isa0 port 0xf0-0xff: using exception 16
pc0 at isa0 port 0x60-0x6f irq 1: color
pms0 at pc0 irq 12
fdc0 at isa0 port 0x3f0-0x3f7 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
apm0 at mainbus0: Power Management spec V1.1
apm0: A/C state: on
apm0: battery charge state: no battery
biomask 40 netmask 840 ttymask 18c2
boot device: fd0
nfs_boot: using network interface 'de0'
de0: preset: bad media 12!
de0: timeout: probing 100baseTX
de0(phy5): autonegotiation restarted: 0x3300
de0(phy5): autonegotiation complete: 0x0000
de0: timeout: probing 100baseTX
de0: timeout: probing 10baseT
de0: enabling 10baseT port
nfs_boot: client_addr=0xc0a8010e
nfs_boot: server_addr=0xc0a80103
nfs_boot: hostname=decoy
root on bicky:/mnt/decoy/root
swap on bicky:/mnt/decoy/swap

>Fix:
	Not yet known.
>Audit-Trail:
>Unformatted: