Date: Tue, 20 Mar 2001 14:06:05 +0100 From: Poul-Henning Kamp <phk@critter.freebsd.dk> To: Ian Dowse <iedowse@maths.tcd.ie> Cc: bp@FreeBSD.org, freebsd-bugs@FreeBSD.org Subject: Re: kern/25936: Unpriviledged user can cause kernel panic with devfs Message-ID: <70369.985093565@critter> In-Reply-To: Your message of "Tue, 20 Mar 2001 12:55:20 GMT." <200103201255.aa08608@salmon.maths.tcd.ie>
next in thread | previous in thread | raw e-mail | index | archive | help
In message <200103201255.aa08608@salmon.maths.tcd.ie>, Ian Dowse writes: >In message <200103201245.f2KCjOJ40461@freefall.freebsd.org>, phk@FreeBSD.org wr >ites: >>Synopsis: Unpriviledged user can cause kernel panic with devfs >> >>State-Changed-From-To: open->feedback >>State-Changed-By: phk >>State-Changed-When: Tue Mar 20 04:43:33 PST 2001 >>State-Changed-Why: >>I can't reproduce a panic on my -current machine, neither >>as root nor as any other user. > >It panics here. Here's a DDB trace, I'll get a gdb one soon. > >login: panic: Invalid minor (1000) in make_dev Right, OK. That is a bug in kern_descipt.c Appearantly it has never supported /dev/fd/N for N > 255. Devfs just happens to catch this bug. I'll fix that. -- Poul-Henning Kamp | UNIX since Zilog Zeus 3.20 phk@FreeBSD.ORG | TCP/IP since RFC 956 FreeBSD committer | BSD since 4.3-tahoe Never attribute to malice what can adequately be explained by incompetence. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?70369.985093565>