From owner-freebsd-bugs Tue Mar 20 5: 6:24 2001 Delivered-To: freebsd-bugs@freebsd.org Received: from critter.freebsd.dk (critter.freebsd.dk [212.242.86.163]) by hub.freebsd.org (Postfix) with ESMTP id D007037B731; Tue, 20 Mar 2001 05:06:17 -0800 (PST) (envelope-from phk@critter.freebsd.dk) Received: from critter (localhost [127.0.0.1]) by critter.freebsd.dk (8.11.3/8.11.3) with ESMTP id f2KD65170371; Tue, 20 Mar 2001 14:06:05 +0100 (CET) (envelope-from phk@critter.freebsd.dk) To: Ian Dowse Cc: bp@FreeBSD.org, freebsd-bugs@FreeBSD.org Subject: Re: kern/25936: Unpriviledged user can cause kernel panic with devfs In-Reply-To: Your message of "Tue, 20 Mar 2001 12:55:20 GMT." <200103201255.aa08608@salmon.maths.tcd.ie> Date: Tue, 20 Mar 2001 14:06:05 +0100 Message-ID: <70369.985093565@critter> From: Poul-Henning Kamp Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org In message <200103201255.aa08608@salmon.maths.tcd.ie>, Ian Dowse writes: >In message <200103201245.f2KCjOJ40461@freefall.freebsd.org>, phk@FreeBSD.org wr >ites: >>Synopsis: Unpriviledged user can cause kernel panic with devfs >> >>State-Changed-From-To: open->feedback >>State-Changed-By: phk >>State-Changed-When: Tue Mar 20 04:43:33 PST 2001 >>State-Changed-Why: >>I can't reproduce a panic on my -current machine, neither >>as root nor as any other user. > >It panics here. Here's a DDB trace, I'll get a gdb one soon. > >login: panic: Invalid minor (1000) in make_dev Right, OK. That is a bug in kern_descipt.c Appearantly it has never supported /dev/fd/N for N > 255. Devfs just happens to catch this bug. I'll fix that. -- Poul-Henning Kamp | UNIX since Zilog Zeus 3.20 phk@FreeBSD.ORG | TCP/IP since RFC 956 FreeBSD committer | BSD since 4.3-tahoe Never attribute to malice what can adequately be explained by incompetence. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message