Bug 5842

Summary: ipw2100 driver + WPA encryption = crash
Product: Drivers Reporter: Daniele Depetrini (daniele.depetrini)
Component: network-wirelessAssignee: drivers_network-wireless (drivers_network-wireless)
Status: CLOSED CODE_FIX    
Severity: high CC: bunk
Priority: P2    
Hardware: i386   
OS: Linux   
Kernel Version: Vanilla 2.6.15 Subsystem:
Regression: --- Bisected commit-id:

Description Daniele Depetrini 2006-01-06 01:25:24 UTC
Most recent kernel where this bug did not occur: N/A
Distribution: Slackware
Hardware Environment: IBM R40 laptop
Software Environment: wpa_supplicant v0.4.6
Problem Description: After booting with ipw2100 enabled, everithing goes well
and wireless led is successifully turned on and operational. But once I launch
wpa_supplicant, kernel crashes with following trace:

Jan  6 10:11:28 vilma kernel: Unable to handle kernel NULL pointer dereference
at virtual address 00000000
Jan  6 10:11:28 vilma kernel:  printing eip:
Jan  6 10:11:28 vilma kernel: 00000000
Jan  6 10:11:28 vilma kernel: *pde = 00000000
Jan  6 10:11:28 vilma kernel: Oops: 0000 [#1]
Jan  6 10:11:28 vilma kernel: PREEMPT
Jan  6 10:11:28 vilma kernel: Modules linked in: ieee80211_crypt_tkip bluetooth
snd_pcm_oss snd_mixer_oss usbhid 8250_pnp uhci_hcd ehci_hcd u
sbcore snd_intel8x0 snd_intel8x0m snd_ac97_codec snd_ac97_bus snd_pcm snd_timer
snd soundcore snd_page_alloc 8250_pci 8250 serial_core ipw210
0 ieee80211 ieee80211_crypt e100 pcmcia firmware_class crc32 yenta_socket
rsrc_nonstatic pcmcia_core nls_iso8859_1 nls_cp437 vfat fat nls_bas
e reiserfs
Jan  6 10:11:28 vilma kernel: CPU:    0
Jan  6 10:11:28 vilma kernel: EIP:    0060:[<00000000>]    Not tainted VLI
Jan  6 10:11:28 vilma kernel: EFLAGS: 00010246   (2.6.15)
Jan  6 10:11:28 vilma kernel: EIP is at _stext+0x3feffde0/0x42
Jan  6 10:11:28 vilma kernel: eax: e0a613c0   ebx: 00000000   ecx: 00000000  
edx: dcd0f460
Jan  6 10:11:28 vilma kernel: esi: 00000001   edi: dcd0f474   ebp: df5a4260  
esp: db11fdd0
Jan  6 10:11:28 vilma kernel: ds: 007b   es: 007b   ss: 0068
Jan  6 10:11:28 vilma kernel: Process wpa_supplicant (pid: 4912,
threadinfo=db11e000 task=df0060b0)
Jan  6 10:11:28 vilma kernel: Stack: e09f7078 00000000 000000d0 0000008d
db737cc0 00000000 dcd0f460 df5a45e8
Jan  6 10:11:28 vilma kernel:        e09f79c1 00000000 00000000 df5a4000
00000404 00000000 00000000 00000000
Jan  6 10:11:28 vilma kernel:        00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000
Jan  6 10:11:28 vilma kernel: Call Trace:
Jan  6 10:11:28 vilma kernel:  [<e09f7078>]
ieee80211_wx_set_encodeext+0x3e0/0x53e [ieee80211]
Jan  6 10:11:28 vilma kernel:  [<c026be2e>] wireless_process_ioctl+0x5d9/0x815
Jan  6 10:11:28 vilma kernel:  [<e0a1dc68>] ipw2100_wx_set_encodeext+0x0/0x16
[ipw2100]
Jan  6 10:11:28 vilma kernel:  [<c025f4de>] dev_load+0x26/0x72
Jan  6 10:11:28 vilma kernel:  [<c02610fa>] dev_ioctl+0x117/0x32a
Jan  6 10:11:28 vilma kernel:  [<c025633e>] sock_ioctl+0xcb/0x233
Jan  6 10:11:28 vilma kernel:  [<c016b02a>] do_ioctl+0x9a/0xa9
Jan  6 10:11:28 vilma kernel:  [<c01cf4d4>] copy_from_user+0x46/0x7e
Jan  6 10:11:28 vilma kernel:  [<c016b1d0>] vfs_ioctl+0x65/0x1e1
Jan  6 10:11:28 vilma kernel:  [<c016b391>] sys_ioctl+0x45/0x6c
Jan  6 10:11:28 vilma kernel:  [<c0103041>] syscall_call+0x7/0xb
Jan  6 10:11:28 vilma kernel: Code:  Bad EIP value.

wpa paramethers:
/usr/local/sbin/wpa_supplicant -ieth1 -d -c /etc/wpa-config.txt -Dwext

cat /etc/wpa-config.txt
ctrl_interface=/var/run/wpa_supplicant
#ctrl_interface_group=0
#eapol_version=1
#fast_reauth=1
ap_scan=1
network={
        ssid="Casa DDIM"
        bssid=<ID>
        proto=WPA
        key_mgmt=WPA-PSK
        pairwise=TKIP
        group=TKIP
        psk="<KEY>"
}
Comment 1 Anonymous Emailer 2006-01-06 01:25:40 UTC
Reply-To: daniele.depetrini@criticalpath.net

Non saro' disponibile fino all'8 gennaio. Per comunicazioni urgenti, contattare helpdesk.it@criticalpath.net oppure telefonare al +39 011 4513811.

I'll not available up to Jan, 8th. For urgent communications, please contact helpdesk.it@criticalpath.net or call +39 011 4513811
http://bugzilla.kernel.org/show_bug.cgi?id=5842

           Summary: ipw2100 driver + WPA encryption = crash
    Kernel Version: Vanilla 2.6.15
            Status: NEW
          Severity: high
             Owner: jgarzik@pobox.com
         Submitter: daniele.depetrini@cp.net


Most recent kernel where this bug did not occur: N/A
Distribution: Slackware
Hardware Environment: IBM R40 laptop
Software Environment: wpa_supplicant v0.4.6
Problem Description: After booting with ipw2100 enabled, everithing goes well
and wireless led is successifully turned on and operational. But once I launch
wpa_supplicant, kernel crashes with following trace:

Jan  6 10:11:28 vilma kernel: Unable to handle kernel NULL pointer dereference
at virtual address 00000000
Jan  6 10:11:28 vilma kernel:  printing eip:
Jan  6 10:11:28 vilma kernel: 00000000
Jan  6 10:11:28 vilma kernel: *pde = 00000000
Jan  6 10:11:28 vilma kernel: Oops: 0000 [#1]
Jan  6 10:11:28 vilma kernel: PREEMPT
Jan  6 10:11:28 vilma kernel: Modules linked in: ieee80211_crypt_tkip bluetooth
snd_pcm_oss snd_mixer_oss usbhid 8250_pnp uhci_hcd ehci_hcd u
sbcore snd_intel8x0 snd_intel8x0m snd_ac97_codec snd_ac97_bus snd_pcm snd_timer
snd soundcore snd_page_alloc 8250_pci 8250 serial_core ipw210
0 ieee80211 ieee80211_crypt e100 pcmcia firmware_class crc32 yenta_socket
rsrc_nonstatic pcmcia_core nls_iso8859_1 nls_cp437 vfat fat nls_bas
e reiserfs
Jan  6 10:11:28 vilma kernel: CPU:    0
Jan  6 10:11:28 vilma kernel: EIP:    0060:[<00000000>]    Not tainted VLI
Jan  6 10:11:28 vilma kernel: EFLAGS: 00010246   (2.6.15)
Jan  6 10:11:28 vilma kernel: EIP is at _stext+0x3feffde0/0x42
Jan  6 10:11:28 vilma kernel: eax: e0a613c0   ebx: 00000000   ecx: 00000000  
edx: dcd0f460
Jan  6 10:11:28 vilma kernel: esi: 00000001   edi: dcd0f474   ebp: df5a4260  
esp: db11fdd0
Jan  6 10:11:28 vilma kernel: ds: 007b   es: 007b   ss: 0068
Jan  6 10:11:28 vilma kernel: Process wpa_supplicant (pid: 4912,
threadinfo=db11e000 task=df0060b0)
Jan  6 10:11:28 vilma kernel: Stack: e09f7078 00000000 000000d0 0000008d
db737cc0 00000000 dcd0f460 df5a45e8
Jan  6 10:11:28 vilma kernel:        e09f79c1 00000000 00000000 df5a4000
00000404 00000000 00000000 00000000
Jan  6 10:11:28 vilma kernel:        00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000
Jan  6 10:11:28 vilma kernel: Call Trace:
Jan  6 10:11:28 vilma kernel:  [<e09f7078>]
ieee80211_wx_set_encodeext+0x3e0/0x53e [ieee80211]
Jan  6 10:11:28 vilma kernel:  [<c026be2e>] wireless_process_ioctl+0x5d9/0x815
Jan  6 10:11:28 vilma kernel:  [<e0a1dc68>] ipw2100_wx_set_encodeext+0x0/0x16
[ipw2100]
Jan  6 10:11:28 vilma kernel:  [<c025f4de>] dev_load+0x26/0x72
Jan  6 10:11:28 vilma kernel:  [<c02610fa>] dev_ioctl+0x117/0x32a
Jan  6 10:11:28 vilma kernel:  [<c025633e>] sock_ioctl+0xcb/0x233
Jan  6 10:11:28 vilma kernel:  [<c016b02a>] do_ioctl+0x9a/0xa9
Jan  6 10:11:28 vilma kernel:  [<c01cf4d4>] copy_from_user+0x46/0x7e
Jan  6 10:11:28 vilma kernel:  [<c016b1d0>] vfs_ioctl+0x65/0x1e1
Jan  6 10:11:28 vilma kernel:  [<c016b391>] sys_ioctl+0x45/0x6c
Jan  6 10:11:28 vilma kernel:  [<c0103041>] syscall_call+0x7/0xb
Jan  6 10:11:28 vilma kernel: Code:  Bad EIP value.

wpa paramethers:
/usr/local/sbin/wpa_supplicant -ieth1 -d -c /etc/wpa-config.txt -Dwext

cat /etc/wpa-config.txt
ctrl_interface=/var/run/wpa_supplicant
#ctrl_interface_group=0
#eapol_version=1
#fast_reauth=1
ap_scan=1
network={
        ssid="Casa DDIM"
        bssid=<ID>
        proto=WPA
        key_mgmt=WPA-PSK
        pairwise=TKIP
        group=TKIP
        psk="<KEY>"
}

------- You are receiving this mail because: -------
You reported the bug, or are watching the reporter.
Comment 2 Daniele Depetrini 2006-01-06 01:30:34 UTC
Additional information: with same WPA config, using external driver
(ipw2100-1.1.3) and external ieee80211 layer (ieee80211-1.1.6), everithing works
fine.
Comment 3 Adrian Bunk 2006-04-22 09:42:54 UTC
Is this issue still present in kernel 2.6.16?
Comment 4 Daniele Depetrini 2006-06-27 00:37:53 UTC
With kernel 2.6.17.1 connection works fine.