⬢ DragonFlyBSD Kernel Audit
DF-5258 / probe_run.log
← back to finding ↓ download raw
mtwprobe: MTW_BULK_RX=0 MTW_EP_QUEUES=6 MTW_TX_RING_COUNT=32
mtwprobe: sizeof(struct mtw_softc)            = 28928
mtwprobe: sizeof(struct mtw_endpoint_queue)   = 2344
mtwprobe: sizeof(sc->sc_epq) as declared      = 0  <-- zero-length array!
mtwprobe: offsetof(struct mtw_softc, sc_epq)  = 12032
mtwprobe: offsetof(rfswitch) [next member]    = 12032 (== sc_epq base)
mtwprobe: 6 queues need 14064 bytes from offset 12032 -> end 26096; softc is only 28928 bytes -> -2832 bytes PAST the allocation
mtwprobe: simulated ifconfig-up stamping clobbered 0 bytes past sizeof(struct mtw_softc) (first at +0)
mtwprobe: LIVE FIELD rfswitch       @+ 12032 INSIDE epq[0] tx_data[0] + 0 (STAILQ next ptr)
mtwprobe: LIVE FIELD txpow1         @+ 12039 INSIDE epq[0] tx_data[0] + 7 (STAILQ next ptr)
mtwprobe: LIVE FIELD lna            @+ 12207 INSIDE epq[0] tx_data[2] + 31 (sc ptr)
mtwprobe: LIVE FIELD txpow20mhz     @+ 12220 INSIDE epq[0] tx_data[2] + 44 (buflen)
mtwprobe: LIVE FIELD sc_chan_group  @+ 12300 INSIDE epq[0] tx_data[3] + 52 (ni (node*) !)
mtwprobe: LIVE FIELD cmd_seq        @+ 12304 INSIDE epq[0] tx_data[3] + 56 (desc[])
mtwprobe: LIVE FIELD sc_detached    @+ 12305 INSIDE epq[0] tx_data[3] + 57 (desc[])
mtwprobe: LIVE FIELD sc_mcu         @+ 12312 INSIDE epq[0] tx_data[3] + 64 (desc[])
mtwprobe: LIVE FIELD rxq            @+ 14640 INSIDE epq[1] tx_data[3] + 48 (ni (node*) !)
mtwprobe: LIVE FIELD txq            @+ 14736 INSIDE epq[1] tx_data[5] + 0 (STAILQ next ptr)
mtwprobe: live field ratectl_task   @+ 28704 after epq region (safe)
mtwprobe: live field ratectl_ch     @+ 28744 after epq region (safe)
mtwprobe: live field sc_bssid       @+ 28776 after epq region (safe)
mtwprobe: live field sc_rxtapu      @+ 28782 after epq region (safe)
mtwprobe: live field sc_txtapu      @+ 28852 after epq region (safe)