Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 25 May 1997 11:27:11 -0700 (PDT)
From:      cschuber@uumail.gov.bc.ca
To:        freebsd-gnats-submit@FreeBSD.ORG
Subject:   kern/3685: panic: fdesc attr
Message-ID:  <199705251827.LAA02304@hub.freebsd.org>
Resent-Message-ID: <199705251830.LAA02467@hub.freebsd.org>

next in thread | raw e-mail | index | archive | help


>Number:         3685
>Category:       kern
>Synopsis:       panic: fdesc attr
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun May 25 11:30:01 PDT 1997
>Last-Modified:
>Originator:     Cy Schubert
>Organization:
ITSD Province of BC
>Release:        FreeBSD 2.2.1-RELEASE i386
>Environment:
FreeBSD cwsys 2.2.1-RELEASE FreeBSD 2.2.1-RELEASE #0: Sun May 25 10:06:48 PDT 1997     root@cwsys:/opt/usr_src/sys/compile/CWSYS  i386

>Description:
find / -type d -perm 777 | xargs ls -ld causes,
panic: fdesc attr
        
KGDB session follows:

(kgdb) symbol-file /kernel
Reading symbols from /kernel...done.
(kgdb) exec-file /var/crash/kernel.1
(kgdb) core-file /var/crash/vmcore.1
IdlePTD 1f5000
current pcb at 1d9ae0
panic: fdesc attr
#0  boot (howto=256) at ../../kern/kern_shutdown.c:243
243                                     dumppcb.pcb_cr3 = rcr3();
(kgdb) bt
#0  boot (howto=256) at ../../kern/kern_shutdown.c:243
#1  0xf010de52 in panic (fmt=0xf0131756 "fdesc attr")
#1  0xf010de52 in panic (fmt=0xf0131756 "fdesc attr")
    at ../../kern/kern_shutdown.c:367
#2  0xf01318fa in fdesc_attr (fd=1, vap=0xefbffdd0, cred=0xf1347780,
    p=0xf1269400) at ../../miscfs/fdesc/fdesc_vnops.c:436
#3  0xf0131a7e in fdesc_getattr (ap=0xefbffdbc)
    at ../../miscfs/fdesc/fdesc_vnops.c:504
#4  0xf01309bc in vn_stat (vp=0xf139f400, sb=0xefbffef8, p=0xf1269400)
    at vnode_if.h:199
#5  0xf012eada in lstat (p=0xf1269400, uap=0xefbfff94, retval=0xefbfff84)
    at ../../kern/vfs_syscalls.c:1346
#6  0xf01b11d3 in syscall (frame={tf_es = 39, tf_ds = 39, tf_edi = 42752,
      tf_esi = 42820, tf_ebp = -272639204, tf_isp = -272629788,
      tf_ebx = 134713440, tf_edx = 42816, tf_ecx = 32768, tf_eax = 190,
      tf_trapno = 7, tf_err = 7, tf_eip = 134497889, tf_cs = 31,
      tf_eflags = 582, tf_esp = -272639332, tf_ss = 39})
    at ../../i386/i386/trap.c:890
#7  0x8044661 in ?? ()
#8  0x8039c4d in ?? ()
#9  0x80395ca in ?? ()
#10 0x1673 in ?? ()
#11 0x31c2 in ?? ()
      tf_ebx = 134713440, tf_edx = 42816, tf_ecx = 32768, tf_eax = 190,
      tf_trapno = 7, tf_err = 7, tf_eip = 134497889, tf_cs = 31,
      tf_eflags = 582, tf_esp = -272639332, tf_ss = 39})
    at ../../i386/i386/trap.c:890
#7  0x8044661 in ?? ()
#8  0x8039c4d in ?? ()

Looking at the arguments passed to lstat() as saved in stack frame #5,
uap->path points to a null terminated string containing "1", which was
the name of any file found by find.  The filename /tmp/.X11-unix does
have a "1" in it.

>How-To-Repeat:
find / -type d -perm 777 | xargs ls -ld   -- or --
find / -type d -perm 777 | xargs ls -l
>Fix:
No fix is available.

Circumvention is:

find / -type d -perm 777 >/tmp/foobar
xargs ls -ld </tmp/foobar
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199705251827.LAA02304>