Date: Tue, 20 Mar 2001 12:55:20 +0000 From: Ian Dowse <iedowse@maths.tcd.ie> To: phk@FreeBSD.org Cc: bp@FreeBSD.org, freebsd-bugs@FreeBSD.org Subject: Re: kern/25936: Unpriviledged user can cause kernel panic with devfs Message-ID: <200103201255.aa08608@salmon.maths.tcd.ie> In-Reply-To: Your message of "Tue, 20 Mar 2001 04:45:24 PST." <200103201245.f2KCjOJ40461@freefall.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
In message <200103201245.f2KCjOJ40461@freefall.freebsd.org>, phk@FreeBSD.org wr
ites:
>Synopsis: Unpriviledged user can cause kernel panic with devfs
>
>State-Changed-From-To: open->feedback
>State-Changed-By: phk
>State-Changed-When: Tue Mar 20 04:43:33 PST 2001
>State-Changed-Why:
>I can't reproduce a panic on my -current machine, neither
>as root nor as any other user.
It panics here. Here's a DDB trace, I'll get a gdb one soon.
Ian
login: panic: Invalid minor (1000) in make_dev
Debugger("panic")
Stopped at Debugger+0x44: pushl %ebx
db> trace
Debugger(c0395a23) at Debugger+0x44
panic(c0392720,3e8,c3bbadb8,c3bbad98,c3bbadc0) at panic+0x70
make_dev(c03fcfa0,3e8,3,7,1b6) at make_dev+0x2e
dupfdopen(0,c3bbadb8,7,c3bbad98,c0f80018) at dupfdopen+0x1d5
devfs_allocv(c3bbae1c,c0f80018,1,0,c3b6f640) at devfs_allocv+0x675
devfs_allocv(c3bbae1c,c39f2ec0,c3bbaec8,c3bbaea0,c3b6f640) at devfs_allocv+0x8b1
lookup(c3bbaea0,c3b6f760,c3b6f640,c3bbaf80,c3b6f640) at lookup+0x291
namei(c3bbaea0,c3b6f760,c3b6f640,2,80ca0c0) at namei+0x177
stat(c3b6f640,c3bbaf80,bfbff390,80c8000,80ca080) at stat+0x41
syscall(2f,2f,2f,80ca080,80c8000) at syscall+0x6b1
Xint0x80_syscall() at Xint0x80_syscall+0x1d
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi? <200103201255.aa08608>