From owner-cvs-src-old@FreeBSD.ORG Wed Jun 10 13:57:55 2009 Return-Path: Delivered-To: cvs-src-old@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A90DB1065678 for ; Wed, 10 Jun 2009 13:57:55 +0000 (UTC) (envelope-from kib@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id 950698FC16 for ; Wed, 10 Jun 2009 13:57:55 +0000 (UTC) (envelope-from kib@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id n5ADvtV2067500 for ; Wed, 10 Jun 2009 13:57:55 GMT (envelope-from kib@repoman.freebsd.org) Received: (from svn2cvs@localhost) by repoman.freebsd.org (8.14.3/8.14.3/Submit) id n5ADvtvd067499 for cvs-src-old@freebsd.org; Wed, 10 Jun 2009 13:57:55 GMT (envelope-from kib@repoman.freebsd.org) Message-Id: <200906101357.n5ADvtvd067499@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to kib@repoman.freebsd.org using -f From: Konstantin Belousov Date: Wed, 10 Jun 2009 13:57:36 +0000 (UTC) To: cvs-src-old@freebsd.org X-FreeBSD-CVS-Branch: HEAD Subject: cvs commit: src/sys/fs/cd9660 cd9660_vnops.c src/sys/fs/devfs devfs_vnops.c src/sys/fs/pseudofs pseudofs_vnops.c X-BeenThere: cvs-src-old@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: **OBSOLETE** CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Jun 2009 13:57:56 -0000 kib 2009-06-10 13:57:36 UTC FreeBSD src repository Modified files: sys/fs/cd9660 cd9660_vnops.c sys/fs/devfs devfs_vnops.c sys/fs/pseudofs pseudofs_vnops.c Log: SVN rev 193919 on 2009-06-10 13:57:36Z by kib VOP_IOCTL takes unlocked vnode as an argument. Due to this, v_data may be NULL or derefenced memory may become free at arbitrary moment. Lock the vnode in cd9660, devfs and pseudofs implementation of VOP_IOCTL to prevent reclaim; check whether the vnode was already reclaimed after the lock is granted. Reported by: georg at dts su Reviewed by: des (pseudofs) MFC after: 2 weeks Revision Changes Path 1.122 +17 -6 src/sys/fs/cd9660/cd9660_vnops.c 1.180 +10 -2 src/sys/fs/devfs/devfs_vnops.c 1.78 +22 -6 src/sys/fs/pseudofs/pseudofs_vnops.c