From owner-freebsd-bugs  Mon Jun  1 13:50:31 1998
Return-Path: <owner-freebsd-bugs@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id NAA00916
          for freebsd-bugs-outgoing; Mon, 1 Jun 1998 13:50:31 -0700 (PDT)
          (envelope-from owner-freebsd-bugs@FreeBSD.ORG)
Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id NAA00905
          for <freebsd-bugs@FreeBSD.org>; Mon, 1 Jun 1998 13:50:28 -0700 (PDT)
          (envelope-from gnats@FreeBSD.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.8.8/8.8.5) id NAA12456;
	Mon, 1 Jun 1998 13:50:01 -0700 (PDT)
Received: from hda.hda.com (hda-bicnet.bicnet.net [208.220.66.37])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id NAA28929
          for <FreeBSD-gnats-submit@freebsd.org>; Mon, 1 Jun 1998 13:42:44 -0700 (PDT)
          (envelope-from dufault@hda.hda.com)
Received: (from dufault@localhost)
	by hda.hda.com (8.8.5/8.8.5) id QAA05579;
	Mon, 1 Jun 1998 16:18:32 -0400 (EDT)
Message-Id: <199806012018.QAA05579@hda.hda.com>
Date: Mon, 1 Jun 1998 16:18:32 -0400 (EDT)
From: Peter Dufault <dufault@hda.com>
Reply-To: dufault@hda.com
To: FreeBSD-gnats-submit@FreeBSD.ORG
X-Send-Pr-Version: 3.2
Subject: kern/6820: cd9660_mount NULL pointer deref for no CDROM drive
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


>Number:         6820
>Category:       kern
>Synopsis:       cd9660_mount NULL pointer deref for no CDROM drive
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:
>Keywords:
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Jun  1 13:50:00 PDT 1998
>Last-Modified:
>Originator:     Peter Dufault
>Organization:
Peter Dufault (dufault@hda.com)   Realtime development, Machine control,
HD Associates, Inc.               Safety critical systems, Agency approval
>Release:        FreeBSD 3.0-Current Sun May 31
>Environment:
>Description:
>How-To-Repeat:
>Fix:
>Audit-Trail:
>Unformatted:

I tried to mount a CD on my crash box.  Unfortunately I don't have a
CDROM drive there.  cd9660_mount crashes with a NULL pointer dereference
of bdevsw[major(devvp->v_rdev)]:

>    if ((mp->mnt_flag & MNT_UPDATE) == 0) {
>        if (bdevsw[major(devvp->v_rdev)]->d_flags & D_NOCLUSTERR)
>            mp->mnt_flag |= MNT_NOCLUSTERR;
>        error = iso_mountfs(devvp, mp, p, &args);
>    } else {

This may have been added in 1.29 in the CLUSTERRING commit.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message