Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 04 Jan 2015 04:45:10 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-bugs@FreeBSD.org
Subject:   [Bug 196474] jls causes kernel panic
Message-ID:  <bug-196474-8-kmG3WyT8kC@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-196474-8@https.bugs.freebsd.org/bugzilla/>
References:  <bug-196474-8@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=196474

--- Comment #4 from Oliver Pinter <op@freebsd.org> ---
please try the following path:

--- sys/kern/vfs_mount.c.orig   2015-01-04 05:38:40.000000000 +0100
+++ sys/kern/vfs_mount.c        2015-01-04 05:38:05.000000000 +0100
@@ -1643,7 +1643,7 @@
                if (opt->value == NULL)
                        opt->len = len;
                else {
-                       if (opt->len < len)
+                       if (len < 0 || opt->len < len)
                                return (EINVAL);
                        opt->len = len;
                        bcopy(value, opt->value, len);

This fixed the problem for me:
root@opn ~# jail -n crashme -c ip4=new persist
root@opn ~# jls
   JID  IP Address      Hostname                      Path
jls: jail_get: Invalid argument

Btw, this is a possible DoS in typical jail based hosting environments.

-- 
You are receiving this mail because:
You are the assignee for the bug.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-196474-8-kmG3WyT8kC>