public inbox for ecos-bugs@sourceware.org
help / color / mirror / Atom feed
* [Issue 1002122] New: controller abort exception by removing a multicast address from multicast list
@ 2016-01-31 23:55 bugzilla-daemon
  0 siblings, 0 replies; only message in thread
From: bugzilla-daemon @ 2016-01-31 23:55 UTC (permalink / raw)
  To: unassigned

Please do not reply to this email, use the link below.

https://bugzilla.ecoscentric.com/show_bug.cgi?id=1002122

          Issue ID: 1002122
           Summary: controller abort exception by removing a multicast
                    address from multicast list
           Product: eCos
           Version: 2.0
            Target: Custom (Customer specific)
 Architecture/Host_ ARM
                OS:
            Status: UNCONFIRMED
          Severity: normal
          Priority: low
         Component: TCP/IP
          Assignee: unassigned@bugs.ecos.sourceware.org
          Reporter: ckraus@bihl-wiedemann.de
        QA Contact: ecos-bugs@ecos.sourceware.org
                CC: ecos-bugs@ecos.sourceware.org
     Custom Target: STR912FAW47

Overview:
In our application we need to add a multicast address in the multicast list of
the bsd stack. We are using the appropriate bsd stack function to add the
multicast address. After we add the multicast address and before! removing we
found out that the le_next pointer (which points to the next element in the
list) is not vaild. It points to nothing!
Anyway, ecos removes the elements from the list and (re)writes the not valid
pointer addresses in the first pointer (first pointer is static to find always
the first element of the list).

Now, If we want to add another multicast address or we receiving a multicast
frame, ecos uses the first pointer again to find the first element in the list.
The pointer is not valid and we get a data abort exception from the controller. 

Steps to Reproduce:
- adding a multicast address in the multicast list of the bsd stack
- removing the same multicast address from the multicast list
- trying to add another address or receiving a multicast frame

Actual Results:
- data abort excption due to not valid pointer

the struct of one list elemet is the following:

#define LIST_ENTRY(type)                                                \
struct {                                                                \
        struct type *le_next;   /* next element */                      \
        struct type **le_prev;  /* address of previous next element */  \
}

struct ifmultiaddr {
        LIST_ENTRY(ifmultiaddr) ifma_link; /* queue macro glue */
        struct  sockaddr *ifma_addr;    /* address this membership is for */
        struct  sockaddr *ifma_lladdr;  /* link-layer translation, if any */
        struct  ifnet *ifma_ifp;        /* back-pointer to interface */
        u_int   ifma_refcount;          /* reference count */
        void    *ifma_protospec;        /* protocol-specific state, if any */
};

and can be found at .../net/var.h

The whole memory for the bsd is at the external sram in our application!


Thanks a lot for your help and ideas
best regards
Christian

-- 
You are receiving this mail because:
You are the assignee for the issue.
>From ecos-bugs-return-11074-listarch-ecos-bugs=sources.redhat.com@sourceware.org Sun Jan 31 23:55:11 2016
Return-Path: <ecos-bugs-return-11074-listarch-ecos-bugs=sources.redhat.com@sourceware.org>
Delivered-To: listarch-ecos-bugs@sources.redhat.com
Received: (qmail 48190 invoked by alias); 31 Jan 2016 23:55:10 -0000
Mailing-List: contact ecos-bugs-help@sourceware.org; run by ezmlm
Precedence: bulk
List-Id: <ecos-bugs.sourceware.org>
List-Subscribe: <mailto:ecos-bugs-subscribe@sourceware.org>
List-Post: <mailto:ecos-bugs@sourceware.org>
List-Help: <mailto:ecos-bugs-help@sourceware.org>, <http://sourceware.org/lists.html#faqs>
Sender: ecos-bugs-owner@sourceware.org
Delivered-To: mailing list ecos-bugs@sourceware.org
Received: (qmail 48169 invoked by uid 89); 31 Jan 2016 23:55:09 -0000
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-1.2 required=5.0 tests=AWL,BAYES_00,RP_MATCHES_RCVD,SPF_PASS autolearn=ham version=3.3.2 spammy=NEXT, like, Reset, navigation
X-HELO: mail.ecoscentric.com
Received: from albus.ecoscentric.com (HELO mail.ecoscentric.com) (212.13.207.200)
 by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with (AES256-GCM-SHA384 encrypted) ESMTPS; Sun, 31 Jan 2016 23:55:07 +0000
Received: by mail.ecoscentric.com (Postfix, from userid 512)
	id D3133A895EF; Sun, 31 Jan 2016 23:55:03 +0000 (GMT)
DKIM-Filter: OpenDKIM Filter v2.10.3 mail.ecoscentric.com D3133A895EF
X-Original-To: unassigned@bugs.ecos.sourceware.org
Delivered-To: unassigned@bugs.ecos.sourceware.org
Content-Transfer-Encoding: quoted-printable
DKIM-Filter: OpenDKIM Filter v2.10.3 mail.ecoscentric.com 0E008A8A74D
Content-Type: text/plain; charset="UTF-8"
From: bugzilla-daemon@ecoscentric.com
To: unassigned@bugs.ecos.sourceware.org
Subject: Your Bugzilla bug list needs attention.
X-Bugzilla-Type: whine
Date: Sun, 07 Feb 2016 23:55:00 -0000
X-Bugzilla-URL: http://bugs.ecos.sourceware.org/
Auto-Submitted: auto-generated
MIME-Version: 1.0
Message-Id: <20160131235502.0E008A8A74D@mail.ecoscentric.com>
X-SW-Source: 2016/txt/msg00015.txt.bz2
Content-length: 3462

[This e-mail has been automatically generated.]

You have one or more bugs assigned to you in the Bugzilla bug tracking system (http://bugs.ecos.sourceware.org/) that require
attention.

All of these bugs are in the CONFIRMED
state, and have not been touched in 7 days or more.
You need to take a look at them, and decide on an initial action.

Generally, this means one of three things:

(1) You decide this bug is really quick to deal with (like, it's INVALID),
    and so you get rid of it immediately.
(2) You decide the bug doesn't belong to you, and you reassign it to
    someone else. (Hint: if you don't know who to reassign it to, make
    sure that the Component field seems reasonable, and then use the
    "Reset Assignee to default" option.)
(3) You decide the bug belongs to you, but you can't solve it this moment.
    Accept the bug by setting the status to IN_PROGRESS.

To get a list of all CONFIRMED bugs, you can use this URL (bookmark
it if you like!):
http://bugs.ecos.sourceware.org/buglist.cgi?bug_status=CONFIRMED&assigned_to=unassigned@bugs.ecos.sourceware.org

Or, you can use the general query page, at 
http://bugs.ecos.sourceware.org/query.cgi

Appended below are the individual URLs to get to all of your CONFIRMED bugs
that haven't been touched for 7 days or more.

You will get this message once a day until you've dealt with these bugs!

 STM32 USB driver unplugging/replugging issue
    -> http://bugs.ecos.sourceware.org/show_bug.cgi?id=1001084
 Navigation of the documentation using PREV NEXT PARENT arrows broken
    -> http://bugs.ecos.sourceware.org/show_bug.cgi?id=1001146
 help documentation tree does not correspond to viewed document
    -> http://bugs.ecos.sourceware.org/show_bug.cgi?id=1001148
 documentation tree in navigation panel does not open at viewed document
    -> http://bugs.ecos.sourceware.org/show_bug.cgi?id=1001149
 CAN loopback driver requires CYGPKG_DEVS_CAN_LOOP_CAN[01]
    -> http://bugs.ecos.sourceware.org/show_bug.cgi?id=1001211
 eCos GNU tools 4.6.3
    -> http://bugs.ecos.sourceware.org/show_bug.cgi?id=1001468
 Fix compiler warnings about mismatch between log() format string and argument values.
    -> http://bugs.ecos.sourceware.org/show_bug.cgi?id=1001510
 Array index out of bounds in tftp_server.c
    -> http://bugs.ecos.sourceware.org/show_bug.cgi?id=1001522
 Cortex-M: Remote 'g' packet reply is too long
    -> http://bugs.ecos.sourceware.org/show_bug.cgi?id=1001524
 BSD nc_test_slave chrashes
    -> http://bugs.ecos.sourceware.org/show_bug.cgi?id=1001586
 [RFC] eCos FLASH startup from RedBoot
    -> http://bugs.ecos.sourceware.org/show_bug.cgi?id=1001623
 Kinetis variant HAL patch: mostly cosmetic and descriptive improvements
    -> http://bugs.ecos.sourceware.org/show_bug.cgi?id=1001783
 Kinetis DSPI, flash and platform HAL tidies
    -> http://bugs.ecos.sourceware.org/show_bug.cgi?id=1001784
 Data not relocated to RAM during ROMINT startup
    -> http://bugs.ecos.sourceware.org/show_bug.cgi?id=1001864
 Freescale ENET support fot little endian.
    -> http://bugs.ecos.sourceware.org/show_bug.cgi?id=1002114
 KSZ8081 Ethernet PHY driver.
    -> http://bugs.ecos.sourceware.org/show_bug.cgi?id=1002115
 Prepare Kinetis for Gen2 K
    -> http://bugs.ecos.sourceware.org/show_bug.cgi?id=1002116
 Freescale UART - some macros for advanced serial buffers.
    -> http://bugs.ecos.sourceware.org/show_bug.cgi?id=1002117


^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2016-01-29 13:16 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2016-01-31 23:55 [Issue 1002122] New: controller abort exception by removing a multicast address from multicast list bugzilla-daemon

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).