Date: Fri, 24 May 2002 05:27:34 -0700 (PDT) From: Greg Troxel <gdt@ir.bbn.com> To: freebsd-gnats-submit@FreeBSD.org Subject: kern/38495: soreceive fails to maintain invariant on UDP sockets if uiomove fails Message-ID: <200205241227.g4OCRYwD000188@www.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 38495 >Category: kern >Synopsis: soreceive fails to maintain invariant on UDP sockets if uiomove fails >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Fri May 24 05:30:03 PDT 2002 >Closed-Date: >Last-Modified: >Originator: Greg Troxel >Release: RELENG_4 as of 20020523 or so >Organization: BBN Technologies >Environment: >Description: Problem observed on NetBSD, and on inspection, FreeBSD has the same code and the same problem. Kernel will likely hit KASSERT at sys/kern/uipc_socket.c line 774 if uiomove fails on recvfrom on a UDP socket. See NetBSD PR bin/16990, at http://www.NetBSD.org/cgi-bin/query-pr-single.pl?number=16990 >How-To-Repeat: See NetBSD PR. Basically, call recvfrom with a NULL pointer to data, and then call it again. >Fix: Merge patch from NetBSD PR. >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200205241227.g4OCRYwD000188>