[haiku-bugs] Re: [Haiku] #9858: Ripping CDs -> page fault panic
- From: "ttcoder" <trac@xxxxxxxxxxxx>
- Date: Wed, 09 Jul 2014 17:18:44 -0000
#9858: Ripping CDs -> page fault panic
-----------------------------+----------------------------
Reporter: ttcoder | Owner: nobody
Type: bug | Status: assigned
Priority: high | Milestone: R1/beta1
Component: System/Kernel | Version: R1/Development
Resolution: | Keywords: slab
Blocked By: | Blocking:
Has a Patch: 0 | Platform: All
-----------------------------+----------------------------
Comment (by ttcoder):
Unfortunately over the years I've spread out CDDA crashing symptoms over a
constellation of tickets before realizing recently that they could be
consolidated into a couple bugs it seems. The inode count lead I've
completely dropped but I did a survey of my tickets and here's a summary
in case you feel like banging your head against the wall ;-)
House keeping:
- apply Jerôme's fix [https://dev.haiku-os.org/ticket/9528#comment:10
here] ; did it locally; it didn't fix the crashes, but at least I know I'm
no longer leaking an fd for each attribute bundle :-)..
- maybe also the `to_utf8` infinite loop risk, though as I said that code
is little to never exercised (and commented out in my builds) but can't
hurt I guess.
R&D/head banging on my todolist, or for anyone with thte spare time:
- review #10259, which a gooddescription of the "text string as pointer"
lead that I'm following in priority.
- look into answering the question [https://dev.haiku-
os.org/ticket/8376#comment:6 here]
- the current/best lead that I have, starts with [https://dev.haiku-
os.org/ticket/9528#comment:8 this comment] and further down. I'll look
into it as time permits. I'll e.g. completely disable free()/delete calls
throughout kernel_interface.cpp, in case the KDL is caused by a heap
corruption after a double-free.
The closest I have to a reproducible case BTW, is opening/closing the
(Tracker) window of the AudioCD as it's being mounted. My intuition is
that the heap corruption occurs at that time, as "cookies" are allocated
for accessing attributes. In the syslog with my extra tracing I can see
that there are "cross-overs" between free_cookie() and allocate_cookie(),
maybe the code is getting confused there..
--
Ticket URL: <https://dev.haiku-os.org/ticket/9858#comment:25>
Haiku <https://dev.haiku-os.org>
Haiku - the operating system.
Other related posts:
