From owner-freebsd-bugs@FreeBSD.ORG Tue Oct 24 13:00:49 2006 Return-Path: X-Original-To: freebsd-bugs@hub.freebsd.org Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 02B4416A40F for ; Tue, 24 Oct 2006 13:00:49 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id B2B3943D5C for ; Tue, 24 Oct 2006 13:00:44 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id k9OD0i7C080866 for ; Tue, 24 Oct 2006 13:00:44 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.4/8.13.4/Submit) id k9OD0isY080865; Tue, 24 Oct 2006 13:00:44 GMT (envelope-from gnats) Date: Tue, 24 Oct 2006 13:00:44 GMT Message-Id: <200610241300.k9OD0isY080865@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org From: Maxim Konovalov Cc: Subject: Re: misc/104747: read of data X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Maxim Konovalov List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 24 Oct 2006 13:00:49 -0000 The following reply was made to PR misc/104747; it has been noted by GNATS. From: Maxim Konovalov To: Vladimir Cc: bug-followup@freebsd.org Subject: Re: misc/104747: read of data Date: Tue, 24 Oct 2006 16:58:02 +0400 (MSD) On Tue, 24 Oct 2006, 12:35-0000, Vladimir wrote: > > >Number: 104747 > >Category: misc > >Synopsis: read of data > >Confidential: no > >Severity: serious > >Priority: high > >Responsible: freebsd-bugs > >State: open > >Quarter: > >Keywords: > >Date-Required: > >Class: sw-bug > >Submitter-Id: current-users > >Arrival-Date: Tue Oct 24 12:40:15 GMT 2006 > >Closed-Date: > >Last-Modified: > >Originator: Vladimir > >Release: 5.X 6.X > >Organization: > Alpenbau > >Environment: > DDoS > >Description: > /* FreeBSD cvs commit: src/sys/ufs/ufs/ufs_vnops.c maxim 2006-05-31 13:15:29 UTC > Log: According to POSIX, the result of ftruncate(2) is unspecified > for file types other than VREG, VDIR and shared memory objects. > We already handle VREG, VLNK and VDIR cases. Silently ignore > truncate requests for all the rest. PR kern/98064 > it out in '06 !"#%&%(20061013)(="#"! > tested on FreeBSD 6.0-RELEASE-p5, 6.1-RELEASE-p10 (latest at the time of writing) - it just makes the system reboot, and with a bit of luck fucks up the filesystem. that sort of makes this 0day local freebsd denial of service for non-CURRENT or whatever. > usage: ./run me > */ We fixed this bug in HEAD, RELENG_6 and therefore in upcoming 6.2-RELEASE. Could you please clarify your point a bit more? -- Maxim Konovalov