From owner-freebsd-security Tue Dec 22 21:03:36 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id VAA25211 for freebsd-security-outgoing; Tue, 22 Dec 1998 21:03:36 -0800 (PST) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from apollo.backplane.com (apollo.backplane.com [209.157.86.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id VAA25205 for ; Tue, 22 Dec 1998 21:03:35 -0800 (PST) (envelope-from dillon@apollo.backplane.com) Received: (from dillon@localhost) by apollo.backplane.com (8.9.1/8.9.1) id VAA11013; Tue, 22 Dec 1998 21:02:25 -0800 (PST) (envelope-from dillon) Date: Tue, 22 Dec 1998 21:02:25 -0800 (PST) From: Matthew Dillon Message-Id: <199812230502.VAA11013@apollo.backplane.com> To: Robert Watson Cc: Eivind Eklund , Dag-Erling Smorgrav , security@FreeBSD.ORG Subject: Re: cvs commit: src/etc rc.conf Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org :> capability transfer support in BSD - you pass an fd over a local :> socket, using SCM_RIGHTS. :... : :The BSD book describes a bug in the mark and sweep garbage collection :algorithm than can result in file descriptor hijacking or kernel memory :nasties. Does anyone know if this was ever fixed? (It is discussed in :the 4.4BSD book in a footnote on the page that discusses SCM_RIGHTS) I :glanced through the code for a while this summer while I was modifying the :SCM_ ancillary data passing code to be hookable by an LKM. My goal was to :... I have no idea.... what does the footnote say exactly? Does it give enough info to point us to a procedure or source file to look at ? -Matt : Robert N Watson Matthew Dillon Engineering, HiWay Technologies, Inc. & BEST Internet Communications & God knows what else. (Please include original email in any response) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message