Ugh, I missed another m_nextpkt = NULL assignment. Try updating again.
Thanks! -adrian On 12 August 2013 14:35, Lev Serebryakov <l...@freebsd.org> wrote: > Hello, Adrian. > You wrote 12 августа 2013 г., 21:47:46: > >>> AC> Hm. OK. >>> AC> What I want is the code path _in_ that's queuing a frame via >>> AC> ieee80211_vap_transmit() with m_nextpkt set to NON-NULL. >>> I could set breakpoint on "printf()" from patch and get backtrace when it >>> will be hit. Is it enough? > > AC> yup > > db> trace > Tracing pid 0 tid 100037 td 0xfffffe0001a95920 > ieee80211_vap_transmit() at ieee80211_vap_transmit+0x12b/frame > 0xffffff812205e950 > pwrsave_flushq() at pwrsave_flushq+0x19f/frame 0xffffff812205e9a0 > hostap_input() at hostap_input+0x8a9/frame 0xffffff812205ea30 > ath_rx_pkt() at ath_rx_pkt+0x3fa/frame 0xffffff812205eaa0 > ath_rx_proc() at ath_rx_proc+0x290/frame 0xffffff812205eb30 > taskqueue_run_locked() at taskqueue_run_locked+0xe6/frame 0xffffff812205eb80 > taskqueue_thread_loop() at taskqueue_thread_loop+0xa8/frame 0xffffff812205ebb0 > fork_exit() at fork_exit+0x75/frame 0xffffff812205ebf0 > fork_trampoline() at fork_trampoline+0xe/frame 0xffffff812205ebf0 > --- trap 0, rip = 0, rsp = 0xffffff812205ecb0, rbp = 0 --- > > And here are files/lines in r254250 with "printf() patch"): > > // No surprise here :) > (kgdb) list *(ieee80211_vap_transmit+0x12b) > 0xffffffff8059ad6b is in ieee80211_vap_transmit > (/data/src/sys/net80211/ieee80211_output.c:466). > 461 * Complain if m->m_nextpkt is set. > 462 * > 463 * The caller should've pulled this apart for us. > 464 */ > 465 if (m->m_nextpkt != NULL) { > 466 printf("%s: m_nextpkt not NULL?!\n", __func__); > 467 m->m_nextpkt = NULL; > 468 } > 469 > 470 /* > (kgdb) list *(pwrsave_flushq+0x19f) > 0xffffffff8059f63f is in pwrsave_flushq > (/data/src/sys/net80211/ieee80211_power.c:477). > 472 > 473 /* VAP frames, aren't encapsulated */ > 474 if (ifp != NULL) { > 475 while (ifp_q != NULL) { > 476 m = ifp_q; > 477 ifp_q = m->m_nextpkt; > 478 KASSERT((!(m->m_flags & M_ENCAP)), > 479 ("%s: vapq with M_ENCAP frame!\n", > __func__)); > 480 (void) ieee80211_vap_xmitpkt(vap, m); > 481 } > (kgdb) list *(hostap_input+0x8a9) > 0xffffffff80588219 is in hostap_input > (/data/src/sys/net80211/ieee80211_hostap.c:655). > 650 /* > 651 * For 4-address packets handle WDS discovery > 652 * notifications. Once a WDS link is setup frames > 653 * are just delivered to the WDS vap (see below). > 654 */ > 655 if (dir == IEEE80211_FC1_DIR_DSTODS && ni->ni_wdsvap > == NULL) { > 656 if (!ieee80211_node_is_authorized(ni)) { > 657 IEEE80211_DISCARD(vap, > 658 IEEE80211_MSG_INPUT | > 659 IEEE80211_MSG_WDS, wh, > (kgdb) list *(ath_rx_proc+0x290) > 0xffffffff80308ec0 is in ath_rx_proc (/data/src/sys/dev/ath/if_ath_rx.c:995). > 990 * Process a single frame. > 991 */ > 992 bus_dmamap_sync(sc->sc_dmat, bf->bf_dmamap, > BUS_DMASYNC_POSTREAD); > 993 bus_dmamap_unload(sc->sc_dmat, bf->bf_dmamap); > 994 bf->bf_m = NULL; > 995 if (ath_rx_pkt(sc, rs, status, tsf, nf, > HAL_RX_QUEUE_HP, bf, m)) > 996 ngood++; > 997 rx_proc_next: > 998 TAILQ_INSERT_TAIL(&sc->sc_rxbuf, bf, bf_list); > 999 } while (ath_rxbuf_init(sc, bf) == 0); > > > -- > // Black Lion AKA Lev Serebryakov <l...@freebsd.org> > _______________________________________________ freebsd-wireless@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-wireless To unsubscribe, send any mail to "freebsd-wireless-unsubscr...@freebsd.org"