site_archiver@lists.apple.com Delivered-To: darwin-kernel@lists.apple.com Andrew Gallatin writes:

Does anybody have any advice about how to track down an mbuf data corruption panic?

FWIW, I finally stopped looking at my receive routine, and found a bug in my transmit routine that explained the problem. I was (rarely) calling mbuf_pullup() and erroneously retaining the original, not the new, mbuf in my transmit data structures. This presumably caused the original mbuf to be freed twice (once a bit later by transmit done interrupt routine, and previously by mbuf_pullup()). Rarely, I'd get a "freeing free mbuf" panic, and more often the frees would happen far enough apart that somebody else had allocated it, and things went downhill fast. Drew _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.a... This email sent to site_archiver@lists.apple.com