Hi!
On Sun, 22 Oct 2000, Henner Eisen wrote:
> >>>>> "liste" == liste <liste@xxxxxxxxxxx> writes:
>
> liste> reported Warning: kfree_skb passed an skb still on a list
> liste> (from <isdn_ppp_push_higher+0x298>).
> In principal it means that the skb is still queued somewhere when caller
> tries to free it. In practice, it frequently indicates that a dangling
> skb pointer or a pointer not related to an skb was passed to
> kfree_skb(). That's probably what's happening here. The kernel
> crash symptoms you describe are also typical for such class of bug.
>
> It also indicates that the bug is probably not inside isdn_ppp, but
> somewhere else (in the lower isdn layers, or even somewhere totally
> unrelated).
Actually, I think the problem is in isdn_ppp.c, I guess we're caught by
the slab poisoning in 2.4 when looking at an already freed skb. I'll try
to look into it tonight.
--Kai
|