Hello, Michael! On Mon, 2007-01-22 at 21:06 +0100, Michael Buesch wrote: > It's obviously some stack/memory corruption. But I'm not > sure if this is a stackoverflow. I'd rather say no, it isn't. > > Could probably be triggered by something like kfree()ing > a dangling pointer or something...
Yes. That's what my patch was for ("Fix major memory corruption bug"). It was pretty hard to catch because I would find the consequences rather than to the offending code. I got lucky after I enabled some weird options, such as 64Gb support and highmem debugging. Whether it played any role or not, the oops finally happened where the driver tried to erase memory pointed to by the stale phy->lo_control pointer. Now the situation is following. No more random crashes. There is still a crash if I rmmod the driver while wlan0 is up, but it's a separate issue, and it's easy to avoid (unlike the interface going down). I hope to look at it soon. The driver connects to a 802.11b Linksys router just fine. I can send and receive data. The driver is fully functional. 128-bit WEP is supported. There are periodic bursts of assertion failures. Looking at the driver, I see three places where lna a.k.a. phy->lo_gain[0] is assigned the value of 32 (written as 0x20 in one place). It's not surprising that it exceeds 7 in lo_measure_feedthrough(). I think the assert() should be replaced with a FIXME, which would not annoy end users so much. And while at that, it would be great to replace phy->lo_gain with four fields with descriptive names. phy->lo_gain is never used as an array. Alternatively, you could make it a structure within bcm43xx_phy. The problems with a MadWifi based AP turn out to be related to 802.11g. If the AP is configured for 802.11b only, everything is working. If 802.11g is enabled, strange things are happening. Judging by what's on the air, it looks like the driver loses the data frames is receives. wpa_supplicant connects instantly, but ARP and ping packets from AP to STA are lost. The frames are even acknowledged, but not seen on the station side. It takes from one to ten minutes util ping suddenly starts working. -- Regards, Pavel Roskin - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html