From owner-freebsd-emulation@FreeBSD.ORG Mon Jan 7 20:10:03 2008 Return-Path: Delivered-To: freebsd-emulation@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C9B5216A417 for ; Mon, 7 Jan 2008 20:10:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id AB54213C44B for ; Mon, 7 Jan 2008 20:10:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id m07KA3qi041620 for ; Mon, 7 Jan 2008 20:10:03 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id m07KA3Dx041615; Mon, 7 Jan 2008 20:10:03 GMT (envelope-from gnats) Date: Mon, 7 Jan 2008 20:10:03 GMT Message-Id: <200801072010.m07KA3Dx041615@freefall.freebsd.org> To: freebsd-emulation@FreeBSD.org From: John Baldwin Cc: Subject: Re: kern/117010: [linuxolator] linux_getdents() get something like buffer overflow or else X-BeenThere: freebsd-emulation@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: John Baldwin List-Id: Development of Emulators of other operating systems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Jan 2008 20:10:03 -0000 The following reply was made to PR kern/117010; it has been noted by GNATS. From: John Baldwin To: bug-followup@freebsd.org, samflanker@gmail.com Cc: Subject: Re: kern/117010: [linuxolator] linux_getdents() get something like buffer overflow or else Date: Mon, 7 Jan 2008 13:54:30 -0500 I've looked at this and the Linux compat in FreeBSD uses the same structures for the two getdents() calls that the Linux kernel uses. It might be helpful to modify the test program to save a copy of the directory and emit some debug info when it changes (i.e. check it after each readdir() call and emit hexdumps of the saved copy and changed one when it chokes along with hexdump of the dirent perhaps). -- John Baldwin