From owner-freebsd-bugs  Mon May 10 12:10: 5 1999
Delivered-To: freebsd-bugs@freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21])
	by hub.freebsd.org (Postfix) with ESMTP id 480CB155F2
	for <freebsd-bugs@FreeBSD.org>; Mon, 10 May 1999 12:10:02 -0700 (PDT)
	(envelope-from gnats@FreeBSD.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.9.3/8.9.2) id MAA58212;
	Mon, 10 May 1999 12:10:01 -0700 (PDT)
	(envelope-from gnats@FreeBSD.org)
Received: by hub.freebsd.org (Postfix, from userid 32767)
	id E169315C21; Mon, 10 May 1999 12:05:49 -0700 (PDT)
Message-Id: <19990510190549.E169315C21@hub.freebsd.org>
Date: Mon, 10 May 1999 12:05:49 -0700 (PDT)
From: will@iki.fi
To: freebsd-gnats-submit@freebsd.org
X-Send-Pr-Version: www-1.0
Subject: kern/11629: File descriptor table sharing is broken
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


>Number:         11629
>Category:       kern
>Synopsis:       File descriptor table sharing is broken
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon May 10 12:10:01 PDT 1999
>Closed-Date:
>Last-Modified:
>Originator:     Ville-Pertti Keinonen
>Release:        Should affect all FreeBSD versions since 2.2.x, verified to cause problems on 3.0, 3.1 and 4.0-current
>Organization:
>Environment:
Not relevant
>Description:
Shared file descriptor tables (created by rfork and aio) are not
properly supported, there is no protection against file descriptor
allocation races, accessing uninitialized files or closing files from
under blocked operations.

This can cause accesses to unallocated memory, deadlocks and panics.

A more detailed description is included in a tarball available at
http://www.hut.fi/~will/freebsd_fdtabsh1.tar.gz
>How-To-Repeat:
Examples are included in the tarball.
>Fix:
A patch is also included in the tarball.

>Release-Note:
>Audit-Trail:
>Unformatted:


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message