From owner-freebsd-current  Tue Oct  3 11:18:21 1995
Return-Path: owner-current
Received: (from root@localhost)
          by freefall.freebsd.org (8.6.12/8.6.6) id LAA14748
          for current-outgoing; Tue, 3 Oct 1995 11:18:21 -0700
Received: from who.cdrom.com (who.cdrom.com [192.216.222.3])
          by freefall.freebsd.org (8.6.12/8.6.6) with ESMTP id LAA14743
          for <current@freebsd.org>; Tue, 3 Oct 1995 11:18:19 -0700
Received: from phaeton.artisoft.com (phaeton.Artisoft.COM [198.17.250.211])
          by who.cdrom.com (8.6.12/8.6.11) with ESMTP id LAA00761
          for <current@freebsd.org>; Tue, 3 Oct 1995 11:12:45 -0700
Received: (from terry@localhost) by phaeton.artisoft.com (8.6.11/8.6.9) id LAA01544; Tue, 3 Oct 1995 11:11:42 -0700
From: Terry Lambert <terry@lambert.org>
Message-Id: <199510031811.LAA01544@phaeton.artisoft.com>
Subject: Re: Another NFS server problem
To: bde@zeta.org.au (Bruce Evans)
Date: Tue, 3 Oct 1995 11:11:42 -0700 (MST)
Cc: current@freebsd.org, terry@lambert.org
In-Reply-To: <199510031549.BAA22650@godzilla.zeta.org.au> from "Bruce Evans" at Oct 4, 95 01:49:51 am
X-Mailer: ELM [version 2.4 PL24]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Content-Length: 648       
Sender: owner-current@freebsd.org
Precedence: bulk

> 
> >Apparently, nfssrv_mkdir doesn't realize that a nfs_namei with nameiop
> >of CREATE causes the underlying file system to imply a SAVENAME flag
> >when the terminal compoenent is reached.  Therefore a failed mkdir
> >will result in a MALLOC of cn_pnbuf in nfs_namei() that is never freed.
> 
> >The failure mode is triggered for a mkdir of an existing dir by a client,
> >leaving the path name buffer allocated on the server.
> 
> nfssrv_mkdir doesn't seem to be reached in that case.

Try it from a PC.


					Terry Lambert
					terry@lambert.org
---
Any opinions in this posting are my own and not those of my present
or previous employers.