From owner-freebsd-bugs  Wed Feb 16 17:30: 6 2000
Delivered-To: freebsd-bugs@freebsd.org
Received: from builder.freebsd.org (builder.FreeBSD.ORG [204.216.27.24])
	by hub.freebsd.org (Postfix) with ESMTP id 8C78037B5C5
	for <freebsd-bugs@FreeBSD.org>; Wed, 16 Feb 2000 17:30:02 -0800 (PST)
	(envelope-from gnats@FreeBSD.org)
Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21])
	by builder.freebsd.org (Postfix) with ESMTP id CCEA6132EE
	for <freebsd-bugs@FreeBSD.org>; Wed, 16 Feb 2000 17:29:23 -0800 (PST)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.9.3/8.9.2) id RAA07156;
	Wed, 16 Feb 2000 17:30:01 -0800 (PST)
	(envelope-from gnats@FreeBSD.org)
Received: from builder.freebsd.org (builder.FreeBSD.ORG [204.216.27.24])
	by hub.freebsd.org (Postfix) with ESMTP id B0F4737B595
	for <FreeBSD-gnats-submit@freebsd.org>; Wed, 16 Feb 2000 17:25:20 -0800 (PST)
	(envelope-from jin@gracie.lbl.gov)
Received: from gracie.lbl.gov (gracie.lbl.gov [131.243.2.175])
	by builder.freebsd.org (Postfix) with ESMTP id 94AAF132F1
	for <FreeBSD-gnats-submit@freebsd.org>; Wed, 16 Feb 2000 17:24:41 -0800 (PST)
Received: (from jin@localhost)
	by gracie.lbl.gov (8.9.3/8.9.3) id RAA01071;
	Wed, 16 Feb 2000 17:25:19 -0800 (PST)
	(envelope-from jin)
Message-Id: <200002170125.RAA01071@gracie.lbl.gov>
Date: Wed, 16 Feb 2000 17:25:19 -0800 (PST)
From: Jin Guojun (FTG staff) <jin@gracie.lbl.gov>
Reply-To: jin@gracie.lbl.gov
To: FreeBSD-gnats-submit@freebsd.org
X-Send-Pr-Version: 3.2
Subject: kern/16767: open("/dev/ppi0") will crash machine without sync disk
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


>Number:         16767
>Category:       kern
>Synopsis:       open("/dev/ppi0") will crash machine without sync disk
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Feb 16 17:30:01 PST 2000
>Closed-Date:
>Last-Modified:
>Originator:     Jin Guojun (FTG staff)
>Release:        FreeBSD 4.0-200002xx-CURRENT i386
>Organization:
>Environment:

	FreeBSD 4.0-200002xx-CURRENT i386

>Description:

	any user can use the following code to crash system.
	Also, the ppi program interface is no longer exist
	in 4.0-xxxx-CURRENT; see header files within #if 0 ... #endif /* 0 */

>How-To-Repeat:

	Run following code will simply cause system panic without
	sync the file system:

	/*	cc this_ppi.c
		./aout	--> system crash
	*/
#include <fcntl.h>

#if     0
#if     (__FreeBSD__ > 3)	/* non-user level header files for using ppi */
#define _KERNEL
#include <sys/bus.h>
#include <sys/bus_private.h>
#endif

#include </sys/dev/ppbus/ppi.h>	/* user interface	*/
#include </sys/dev/ppbus/ppbconf.h>
#endif

main(int argc, char* argv[])
{
int     pd;
#define iodev   "/dev/ppi0"

        if ((pd = open(iodev, O_WRONLY)) < 0)
                err(1, "open %s", iodev);
}


>Fix:
	
	


>Release-Note:
>Audit-Trail:
>Unformatted:


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message