Date: Thu, 15 Jul 2004 15:31:31 -0700 From: Kris Kennaway <kris@obsecurity.org> To: Colin Percival <colin.percival@wadham.ox.ac.uk> Cc: Kris Kennaway <kris@obsecurity.org> Subject: Re: 5.3-RELEASE TODO Message-ID: <20040715223131.GA35816@xor.obsecurity.org> In-Reply-To: <6.1.0.6.1.20040715151650.03fae510@popserver.sfu.ca> References: <200407151424.i6FEOdoq060881@fledge.watson.org> <20040715220447.GA32888@xor.obsecurity.org> <6.1.0.6.1.20040715151650.03fae510@popserver.sfu.ca>
next in thread | previous in thread | raw e-mail | index | archive | help
--y0ulUmNC+osPPQO6
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Thu, Jul 15, 2004 at 03:20:19PM -0700, Colin Percival wrote:
> At 15:04 15/07/2004, Kris Kennaway wrote:
> >* linprocfs=20
> >[...]
> > if (pvd->pvd_pid !=3D NO_PID) {
> > if ((proc =3D pfind(pvd->pvd_pid)) =3D=3D NULL)
> > PFS_RETURN (ENOENT);
> >--> vap->va_uid =3D proc->p_ucred->cr_ruid;
> >
> >rwatson has a patch that works around this particular null pointer
> >deref, but the underlying cause is not addressed.
>=20
> This looks like the "embryonic processes are added to allproc and
> p_hash too soon" bug (cf. kern/68364). Last I heard, tjr was going
> to fix this in the next few days.
Good :)
Kris
--y0ulUmNC+osPPQO6
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)
iD8DBQFA9wXCWry0BWjoQKURAutvAKDohWzc8S66KVsckXp6mgnXWxH8oQCghHBH
jXr9QlvzCj2t6tCV0oXZv4Y=
=c0qj
-----END PGP SIGNATURE-----
--y0ulUmNC+osPPQO6--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040715223131.GA35816>