id	summary	reporter	owner	description	type	status	priority	component	version	resolution	keywords	cc	guest	host
3981	vbi module panic on opensolaris kernel build 114 and newer => Fixed in SVN	jkeil2		With the putback for bug 6565817 "sigwait can't wait for SIGTSTP"\r\nthe Solaris kernel data structure kthread_t was modified.\r\n[http://bugs.opensolaris.org/view_bug.do?bug_id=6565817]\r\n\r\nThe vbi kernel module distributed with VirtualBox 2.2.2 seems to\r\naccess data in kthread_t using the old offsets, so that it panics\r\nwhen we run on a build 114 (or newer) kernel.  To reproduce the\r\nproblem, try to start a virtualbox guest on an opensolaris\r\nbuild 114 (or newer) host.\r\n\r\n\r\nPanic information:\r\n\r\n{{{\r\n> ::status\r\ndebugging crash dump vmcore.0 (32-bit) from max\r\noperating system: 5.11 snv_115_jk (i86pc)\r\npanic message:\r\nBAD TRAP: type=e (#pf Page fault) rp=b5104bf4 addr=4 occurred in\r\nmodule "vbi" due to a NULL pointer dereference\r\ndump content: kernel pages only\r\n\r\n> $C\r\nb5104c54 vbi_user_map+0x11(b5104c84, 1, bf85b2c0, 1000)\r\nb5104c94 rtR0MemObjNativeMapUser+0xc8(b5104cc4, aa5961a8, ffffffff, 1000, 1, 0)\r\nb5104cd4 RTR0MemObjMapUser+0xb8(bf2f0c28, aa5961a8, ffffffff, 0, 1, 0)\r\nb5104d34 SUPR0GipMap+0x1be()\r\nb5104d94 supdrvIOCtl+0x391(c0185614, ab3838e0, bf2f0c10, b5104dbc)\r\nb5104e14 VBoxDrvSolarisIOCtl+0xf1()\r\nb5104e44 cdev_ioctl+0x31(4b40000, c0185614, 8045cd0, 102003, bf037a90, b5104f00)\r\nb5104e74 spec_ioctl+0x6b(c89ef680, c0185614, 8045cd0, 102003,\r\nbf037a90, b5104f00)\r\nb5104ec4 fop_ioctl+0x49(c89ef680, c0185614, 8045cd0, 102003, bf037a90, b5104f00)\r\nb5104f84 ioctl+0x171()\r\nb5104fac sys_sysenter+0x106()\r\n\r\n> vbi_user_map::dis\r\nvbi_user_map:                   pushl  %ebp\r\nvbi_user_map+1:                 movl   %esp,%ebp\r\nvbi_user_map+3:                 subl   $0x14,%esp\r\nvbi_user_map+6:                 call   +0x6021c85       <threadp>\r\nvbi_user_map+0xb:               movl   0xdc(%eax),%eax\r\nvbi_user_map+0x11:              movl   0x4(%eax),%eax\r\nvbi_user_map+0x14:              movl   %eax,-0x8(%ebp)\r\n}}}\r\n\r\n	defect	closed	blocker	host support	VirtualBox 2.2.2	fixed			Solaris	Solaris
