illumos gate

The following dtrace output shows data that should result in a kernel crash.

root@violin:/opt/cargo-bay# cat mp.d
fbt:ip:ip_select_route:entry {
            print(args[2]);
}

root@violin:/opt/cargo-bay# dtrace -s mp.d
dtrace: script 'mp.d' matched 1 probe
CPU     ID                    FUNCTION:NAME
  0  50772            ip_select_route:entry ip_xmit_attr_t * 0

  0  50772            ip_select_route:entry ip_xmit_attr_t * 0

However, the kernel does not crash and what we are seeing is an incorrect value reported for the ixa argument of ip_select_route.

This appears to happen because the previous argument is passed by value and has the type in6_addr_t, which is a 128-bit value that throws off the address mappings for the arguments that follow.