http://defect.opensolaris.org/bz/show_bug.cgi?id=4001





--- Comment #2 from Bill Holler <bill.holler at sun.com>  2008-10-16 13:56:14 
---
(In reply to comment #1)
> cpu_idle_fini() is using NULL cstate in this loop:
>         for (i = CPU_ACPI_C1; i <= cpu_max_cstates; i++) {
>                 if (cstate->cs_ksp != NULL)
>                         kstat_delete(cstate->cs_ksp);
>         }


Disassembly and register dump show %r12 contains cstate which is 0.
0x20 is added to %r12 to get the address of (cstate->cs_ksp).
0x20 is then dereferenced to get an invalid value for cstate->cs_ksp.
The invalid value is not NULL.

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

Reply via email to