ip_queue_xmit oops in 2.1.17

Richard Henderson (richard@atheist.tamu.edu)
Mon, 30 Dec 1996 21:18:02 -0600 (CST)

Sometime this afternoon my alpha running 2.1.17 dereferenced
a NULL pointer at:

(gdb) l *0xfffffc000036eb90
0xfffffc000036eb90 is in ip_queue_xmit (ip_output.c:366).
361 kfree_skb(skb, FREE_WRITE);
362 return;
363 }
364 #endif
365
366 if (skb_headroom(skb) < dev->hard_header_len &&
dev->hard_header) {
367 struct sk_buff *skb2;
368 /* ANK: It is almost impossible, but
369 * if you loaded module device with hh_len >
MAX_HEADER,
370 * and if a route changed to this device,

in which dev was NULL. The oops' return address is garbage.

The network devices in use were eth0 and ppp0; the ppp link
may have just gone down.

r~