wifi driver中的一次kernel panic分析

软件开发过程中，最怕遇见kernel panic的错误，本文记录了一次发生在wifi driver中的kernel panic的简要分析过程。

• 问题描述

使用VERIWAVE下APP进行无线多用户连接测试，包括关联+认证+流量+去关联过程。配置63个clients，wep加密，第一次测试能正确完成，第二次测试时AP出现kernel panic错误。系统重启后同样操作必现该panic。

• 日志信息

Line 001:    Unable to handle kernel NULL pointer dereference at virtual address 00000020
Line 002:    pgd = c0004000
Line 003:    [00000020] *pgd=00000000
Line 004:    Internal error: Oops: 17 [#1]
Line 005:    Modules linked in: xfrm4_mode_tunnel xfrm4_mode_transport l2tp_ppp l2tp_core l2_drv ath_pktlog(P) umac ath_dev(P) hst_tx99(P) ath_dfs(P)
 ath_spectral(P) ath_rate_atheros(P) ath_hal(P) asf(P) adf(P) eth_drv iptable_filter iptable_nat nf_nat ip6table_filter ip_tables ip6_tables nf_conntrack_ipv6
 nf_defrag_ipv6 nf_conntrack_tftp nf_conntrack_ftp ppp_async crc_ccitt pppoe pppox ppp_generic slhc xt_state mdr_dbg_mod misc_mod
Line 006:    CPU: 0    Tainted: P        W    (3.0.6_cig002 #14)
Line 007:    PC is at cwm_get_width+0x14/0x24 [umac]
Line 008:    LR is at ieee80211_alloc_node+0x234/0x444 [umac]
Line 009:    pc : [<bf66fee4>]    lr : [<bf6495ec>]    psr: a0000113
Line 010:    sp : c03ff8d8  ip : c03ff8e8  fp : c03ff8e4
Line 011:    r10: c5fca028  r9 : ffffffff  r8 : cbca9988
Line 012:    r7 : bf6e5558  r6 : 00000000  r5 : c5854000  r4 : c5fca000
Line 013:    r3 : 00000000  r2 : bf66fed0  r1 : 00003068  r0 : cbca83c0
Line 014:    Flags: NzCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment kernel
Line 015:    Control: 10c5387d  Table: 09cb4019  DAC: 00000015
Line 016:    Process swapper (pid: 0, stack limit = 0xc03fe2e8)
Line 017:    Stack: (0xc03ff8d8 to 0xc0400000)
Line 018:    f8c0:                                                       c03ff944 c03ff8e8
Line 019:    f8e0: bf6495ec bf66fedc ffffffff 00000016 00000000 00000000 00000000 cbca0000
Line 020:    f900: 00000400 00000080 c44c809a c5fcaae1 bf65829c cbca83c0 00000000 c5854000
Line 021:    f920: c5854000 c44c809a c44c80ae c44c8090 00000001 00000000 c03ff964 c03ff948
Line 022:    f940: bf64a3f4 bf6493c4 00000000 c5854000 c5806000 c44c809a c03ff9c4 c03ff968
Line 023:    f960: bf689aec bf64a3d8 00000001 c5fca108 00000000 00000000 c44c609a c5fca108
Line 024:    f980: 00000000 00000001 00000071 ca3ef2c0 c5806000 c5fca111 c03ff9f4 00000000
Line 025:    f9a0: 00000006 cbceff20 c44c80ae c5806000 cbceff20 00000000 c03ff9f4 c03ff9c8
Line 026:    f9c0: bf6855a0 bf689690 00000000 00000000 cbceff20 bf6cffb0 c44c8090 c5854000
Line 027:    f9e0: 00000000 c5806ae0 c03ffa84 c03ff9f8 bf67de78 bf685568 00000000 00000000
Line 028:    fa00: cbceff20 00000001 c03ffa2c c03ffa18 c5854000 c00c3cf4 0000027b c03ffc10
Line 029:    fa20: 00000000 00000001 c021cfb8 c021ccf4 c03ffa4c c03ffa40 c022667c c021cf7c
Line 030:    fa40: c03ffa5c c03ffa50 bf53e14c c0226644 c03ffa84 c03ffa60 bf6cf950 c5854000
Line 031:    fa60: 00000000 c5806000 00000000 000000b0 cbceff20 c03ffc10 c03ffb14 c03ffa88
Line 032:    fa80: bf6b5cf0 bf67ce58 c03ffc10 c43af134 c03ffab4 c03ffaa0 bf60aed8 c006a644
Line 033:    faa0: c03ffad4 cb6575c0 c03ffacc c03ffab8 bf5f9ecc c5854110 c03ffadc c03ffad4
Line 034:    fac0: c03ffb04 c03ffad8 bf53e4f4 c43ae000 000000b0 c43ae000 00000000 c03ffae8
Line 035:    fae0: 00000000 00000008 c03ffb04 00000000 00000000 00000001 c5806000 c5854000
Line 036:    fb00: ffffffff 000012ec c03ffb8c c03ffb18 bf6b6ccc bf6b58f4 c03ffc10 00000000
Line 037:    fb20: c5806000 c6017000 c5806000 c5854000 c03ffb7c c03ffb40 bf648100 bf664a40
Line 038:    fb40: 00000000 c03ffb50 bf570484 c03ffbd0 00000000 00000000 c6017000 c473f380
Line 039:    fb60: 00000006 00000000 00000000 00005dc0 ca420000 0000096c cbca83c0 c03ffd28
Line 040:    fb80: c03ffc94 c03ffb90 bf66c1d0 bf6b6bfc c03ffbac c03ffba0 c021cfb8 c021ccf4
Line 041:    fba0: c03ffbbc c03ffbb0 c022667c 0000003b ca420000 c03ffd34 c03ffd31 cbceff20
Line 042:    fbc0: 00000000 0000003b ffffffdc 00005