Date: Fri, 15 Aug 2014 04:26:46 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-bugs@FreeBSD.org Subject: [Bug 192671] New: [cam] cam_close_device/cam_close_spec_device can trash valid file descriptors if called more than once on a device Message-ID: <bug-192671-8@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192671 Bug ID: 192671 Summary: [cam] cam_close_device/cam_close_spec_device can trash valid file descriptors if called more than once on a device Product: Base System Version: 11.0-CURRENT Hardware: Any OS: Any Status: Needs Triage Severity: Affects Some People Priority: --- Component: kern Assignee: freebsd-bugs@FreeBSD.org Reporter: yaneurabeya@gmail.com cam_close_spec_device doesn't modify dev->fd after calling cam_close_spec_device, so if cam_close_spec_device is called multiple times on a dev object, it can trash valid file descriptors associated with cam or other pieces of code. See http://svnweb.freebsd.org/base/head/lib/libcam/camlib.c?annotate=257388#l680 for more details. Reported by: Scott Ferris <sferris@isilon.com> -- You are receiving this mail because: You are the assignee for the bug.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-192671-8>