Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 28 Nov 1997 21:45:58 +0100 (CET)
From:      Martin Kammerhofer <dada@sbox.tu-graz.ac.at>
To:        FreeBSD-gnats-submit@FreeBSD.ORG
Subject:   i386/5174: kbdcontrol(1) can easily crash system
Message-ID:  <199711282045.VAA01783@lend.tu-graz.ac.at>
Resent-Message-ID: <199711291000.CAA21451@hub.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         5174
>Category:       i386
>Synopsis:       kbdcontrol(1) can easily crash system
>Confidential:   yes
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Nov 29 02:00:00 PST 1997
>Last-Modified:
>Originator:     Martin Kammerhofer
>Organization:
Graz University of Technology
>Release:        FreeBSD 2.2-STABLE i386
>Environment:

syscons driver configured in kernel (as usual)

>Description:

Setting history buffer size to an unusual large number reboots the system.

Impact: Anyone with access to a /dev/ttyv? can crash the system. Fortunately
	this (usually) requires physical access to the console where you could
	press the big red button as well...

>How-To-Repeat:

kbdcontrol -h 300000 </dev/ttyv0

>Fix:
	
Add parameter checking to /usr/sbin/kbdcontrol.
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199711282045.VAA01783>