From owner-freebsd-bugs@freebsd.org Mon Aug 3 06:27:35 2020 Return-Path: Delivered-To: freebsd-bugs@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 40655370612 for ; Mon, 3 Aug 2020 06:27:35 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mailman.nyi.freebsd.org (mailman.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:13]) by mx1.freebsd.org (Postfix) with ESMTP id 4BKnxM11BYz4N2F for ; Mon, 3 Aug 2020 06:27:35 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: by mailman.nyi.freebsd.org (Postfix) id 20F6437025D; Mon, 3 Aug 2020 06:27:35 +0000 (UTC) Delivered-To: bugs@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 1FAD93704CB for ; Mon, 3 Aug 2020 06:27:35 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4BKnxL6vTkz4Mkh for ; Mon, 3 Aug 2020 06:27:34 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id CCB151019D for ; Mon, 3 Aug 2020 06:27:34 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 0736RY3R022968 for ; Mon, 3 Aug 2020 06:27:34 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 0736RYr5022967 for bugs@FreeBSD.org; Mon, 3 Aug 2020 06:27:34 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 248444] /usr/sbin/jail crashes when parsing certain configuration files Date: Mon, 03 Aug 2020 06:27:34 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: bin X-Bugzilla-Version: 12.1-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: ms-freebsd-bugzilla@stoffnet.at X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter cc Message-ID: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Aug 2020 06:27:35 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D248444 Bug ID: 248444 Summary: /usr/sbin/jail crashes when parsing certain configuration files Product: Base System Version: 12.1-RELEASE Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: bin Assignee: bugs@FreeBSD.org Reporter: ms-freebsd-bugzilla@stoffnet.at CC: ms-freebsd-bugzilla@stoffnet.at Some variable names may cause the configuration parser to crash. So far I c= ould only reproduce this issue with "$interface". Example: Setting "$interface" in two jail configurations ("crash" and "nocrash"). Us= ing any jail configuration but the last one ("nocrash") will crash the configuration parser. You could have any number of crashing jails ("crash1", "crash2", ...), but only one jail that does not crash (the bottom most one). jail.conf: persist; exec.prestart =3D "echo '\$interface =3D ${interface}'"; crash { $interface =3D "vr0"; } nocrash { $interface =3D "vr1"; } How to reproduce: # jail -f jail.conf -c crash Segmentation fault (core dumped) # jail -f crash.conf -c nocrash $interface =3D vr1 nocrash: created # jail -f crash.conf -r nocrash nocrash: removed --=20 You are receiving this mail because: You are the assignee for the bug.=