Decipher a kernel panic

[amoda]

panic(cpu 1 caller 0x001A429B): Unresolved kernel trap (CPU 1, Type 14=page fault), registers:
CR0: 0x80010033, CR2: 0xff000004, CR3: 0x00e44000, CR4: 0x000006e0
EAX: 0x03ae2238, EBX: 0x00000011, ECX: 0x02f2f400, EDX: 0xff000000
CR2: 0xff000004, EBP: 0x14133db8, ESI: 0x03ae23f8, EDI: 0x02f2f400
EFL: 0x00010286, EIP: 0x0011f159, CS: 0x00000008, DS: 0x14130010

Backtrace, Format - Frame : Return Address (4 potential args on stack)
0x14133bf8 : 0x128d08 (0x3cb134 0x14133c1c 0x131de5 0x0)
0x14133c38 : 0x1a429b (0x3d0e4c 0x1 0xe 0x3d0670)
0x14133d48 : 0x19ada4 (0x14133d58 0x202 0xe 0x120048)
0x14133db8 : 0x12b5b5 (0x2f2f400 0x3dd67a8 0x0 0x0)
0x14133df8 : 0x124b17 (0x2f2f400 0x0 0x28 0x14133edc)
0x14133f08 : 0x195a42 (0x14133f44 0x0 0x0 0x0)
0x14133fc8 : 0x19b21e (0x25afe88 0x0 0x8 0x3acd9dc) No mapping exists for frame pointer
Backtrace terminated-invalid frame pointer 0xbfffe628

Kernel version:
Darwin Kernel Version 8.9.1: Thu Feb 22 20:55:00 PST 2007; root:xnu-792.18.15~1/RELEASE_I386

Model: MacBookPro1,1, BootROM MBP11.0055.B08, 2 processors, Intel Core Duo, 1.83 GHz, 1 GB
Graphics: ATI Radeon X1600, ATY,RadeonX1600, PCIe, 128 MB
Memory Module: BANK 0/DIMM0, 512 MB, DDR2 SDRAM, 667 MHz
Memory Module: BANK 1/DIMM1, 512 MB, DDR2 SDRAM, 667 MHz
AirPort: spairport_wireless_card_type_airport_extreme (0x168C, 0x86), 0.1.31.1
Bluetooth: Version 1.7.14f14, 2 service, 0 devices, 1 incoming serial ports
Network Service: AirPort, AirPort, en1
Serial ATA Device: TOSHIBA MK8032GSX, 74.53 GB
Parallel ATA Device: MATSHITADVD-R UJ-857
USB Device: Built-in iSight, Micron, Up to 480 Mb/sec, 500 mA
USB Device: USB FLASH DRIVE, Up to 480 Mb/sec, 500 mA
USB Device: Apple Internal Keyboard / Trackpad, Apple Computer, Up to 12 Mb/sec, 500 mA
USB Device: IR Receiver, Apple Computer, Inc., Up to 12 Mb/sec, 500 mA
USB Device: Bluetooth HCI, Up to 12 Mb/sec, 500 mA

I'm just wondering if anyone knows what this means and what could've caused the kernal panic.

 

[epochblue]

Is this a recurring panic or isolated? This is a tough one as there's usually more info in the crash logs, at least in my experience (of one KP, mind you).

 

[amoda]

Well it's the first time...on this logic board. I used to have kernal panics in the old one but it was switched (it gave an error code when doing an extended diagnostics). This board is only 2 or so weeks old so i'm surprised it's acting up already.

 

[epochblue]

Well it's the first time...on this logic board. I used to have kernal panics in the old one but it was switched (it gave an error code when doing an extended diagnostics). This board is only 2 or so weeks old so i'm surprised it's acting up already.

If they've changed the Logic Board already, do you know if they checked the RAM? If it's doing it again on a new board, it's possible the RAM is bad.

 

[amoda]

Hey,

I'm pretty sure they checked the ram since he said that he did a full diagnostic test. I also just finished doing an extended diagnostic test and it came up with nothing. So i guess it might just have been a freak kp. Hopefully it doesn't happen again, or if it does at least before my warranty expires.

 

[yellow]

There's nothing in that KP that signifies software, so I'm going to assume that it's hardware related.

If you were using the diag that came with AppleCare, don't bother.
It's less than useless..

Try using memtest http://www.memtestosx.org/

Let it run at least 2 concurrent passes. Best in Single User Mode.

 

[amoda]

Hey,

I ran the test you said, and nothing showed up. Now i've been getting them again. Except there are little differences between each one. I went to the repair center and he said he doesn't know what's going on and he can't help me. I'll post the latest two and if anybody had any similar ones and knows what's wrong can you mail me or post here? It's getting annoying crashing all the time.

1.
panic(cpu 1 caller 0x00190BBC): pmap-remove: mapping not in pv_list!
Backtrace, Format - Frame : Return Address (4 potential args on stack)
0x1409bd38 : 0x128d08 (0x3cb134 0x1409bd5c 0x131de5 0x0)
0x1409bd78 : 0x190bbc (0x3ce320 0x0 0x1409bda8 0x1a3010)
0x1409bdd8 : 0x193c43 (0x29a0a000 0x29a0b000 0x0 0x181265)
0x1409be28 : 0x181357 (0x34cee0c 0x90000000 0x0 0xa0000000)
0x1409bea8 : 0x13a684 (0x39ca980 0x0 0x0 0xffe00000)
0x1409bef8 : 0x33a617 (0x2fa00e0 0x0 0x1409bf18 0x19e23a)
0x1409bf38 : 0x33a645 (0x3040bb8 0x0 0x31011cc 0x3101188)
0x1409bf58 : 0x379e23 (0x3040bb8 0x3101188 0x31011cc 0x0)
0x1409bfc8 : 0x19b17e (0x4294b68 0x0 0x19e0b5 0x26fa160) No mapping exists for frame pointer
Backtrace terminated-invalid frame pointer 0xbffff568

Kernel version:
Darwin Kernel Version 8.9.1: Thu Feb 22 20:55:00 PST 2007; root:xnu-792.18.15~1/RELEASE_I386

Model: MacBookPro1,1, BootROM MBP11.0055.B08, 2 processors, Intel Core Duo, 1.83 GHz, 1 GB
Graphics: ATI Radeon X1600, ATY,RadeonX1600, PCIe, 128 MB
Memory Module: BANK 0/DIMM0, 512 MB, DDR2 SDRAM, 667 MHz
Memory Module: BANK 1/DIMM1, 512 MB, DDR2 SDRAM, 667 MHz
AirPort: spairport_wireless_card_type_airport_extreme (0x168C, 0x86), 0.1.31.1
Bluetooth: Version 1.7.14f14, 2 service, 0 devices, 1 incoming serial ports
Network Service: AirPort, AirPort, en1
Serial ATA Device: TOSHIBA MK8032GSX, 74.53 GB
Parallel ATA Device: MATSHITADVD-R UJ-857
USB Device: Built-in iSight, Micron, Up to 480 Mb/sec, 500 mA
USB Device: Bluetooth HCI, Up to 12 Mb/sec, 500 mA
USB Device: IR Receiver, Apple Computer, Inc., Up to 12 Mb/sec, 500 mA
USB Device: Apple Internal Keyboard / Trackpad, Apple Computer, Up to 12 Mb/sec, 500 mA

2.
panic(cpu 0 caller 0x001A429B): Unresolved kernel trap (CPU 0, Type 14=page fault), registers:
CR0: 0x8001003b, CR2: 0xd50ee980, CR3: 0x00d9b000, CR4: 0x000006e0
EAX: 0x005dcc30, EBX: 0xd50ee980, ECX: 0x005dcc30, EDX: 0x02cd31a0
CR2: 0xd50ee980, EBP: 0x13f13fa8, ESI: 0xd50ee9e8, EDI: 0x00000026
EFL: 0x00010206, EIP: 0x00141a7c, CS: 0x00000008, DS: 0x13f10010

Backtrace, Format - Frame : Return Address (4 potential args on stack)
0x13f13d88 : 0x128d08 (0x3cb134 0x13f13dac 0x131de5 0x0)
0x13f13dc8 : 0x1a429b (0x3d0e4c 0x0 0xe 0x3d0670)
0x13f13ed8 : 0x19ada4 (0x13f13ee8 0x12cdd48 0xe 0x190048)
0x13f13fa8 : 0x178d5b (0x178cff 0x0 0x13f13fcc 0x2508a44)
0x13f13fc8 : 0x19ac1c (0x1 0x0 0x8 0x2508a44) Backtrace terminated-invalid frame pointer 0x0

Kernel version:
Darwin Kernel Version 8.9.1: Thu Feb 22 20:55:00 PST 2007; root:xnu-792.18.15~1/RELEASE_I386

Model: MacBookPro1,1, BootROM MBP11.0055.B08, 2 processors, Intel Core Duo, 1.83 GHz, 1 GB
Graphics: ATI Radeon X1600, ATY,RadeonX1600, PCIe, 128 MB
Memory Module: BANK 0/DIMM0, 512 MB, DDR2 SDRAM, 667 MHz
Memory Module: BANK 1/DIMM1, 512 MB, DDR2 SDRAM, 667 MHz
AirPort: spairport_wireless_card_type_airport_extreme (0x168C, 0x86), 0.1.31.1
Bluetooth: Version 1.7.14f14, 2 service, 0 devices, 1 incoming serial ports
Network Service: AirPort, AirPort, en1
Serial ATA Device: TOSHIBA MK8032GSX, 74.53 GB
Parallel ATA Device: MATSHITADVD-R UJ-857
USB Device: Built-in iSight, Micron, Up to 480 Mb/sec, 500 mA
USB Device: Apple Internal Keyboard / Trackpad, Apple Computer, Up to 12 Mb/sec, 500 mA
USB Device: IR Receiver, Apple Computer, Inc., Up to 12 Mb/sec, 500 mA
USB Device: Bluetooth HCI, Up to 12 Mb/sec, 500 mA

Thanks in advance for any help!

 

[yellow]

The first one is an exploit of a bug in how Safari handles disk images.

URL: http://projects.info-pull.com/mokb/MOKB-20-11-2006.html

Mac OS X com.apple.AppleDiskImageController fails to properly handle corrupted DMG image structures, leading to an exploitable memory corruption condition with potential kernel-mode arbitrary code execution by unprivileged users.

This issue is remotely exploitable as Safari loads DMG files from external sources (ex. visiting an URL). This can be prevented by changing the Preferences and deactivating the functionality for 'opening "safe" files after downloading'.

Right now, Apple doesn't provide a public specification for the DMG format, nor source and/or API reference for com.apple.AppleDiskImageController. Although, the binary-form code can be found at /System/Library/Extensions/IOHDIXController.kext/Contents/MacOS/IOHDIXController.

I have no idea what the second one is about. You'll have to start trying to figure out if it's reproducable.