Date: Sun, 14 May 2000 12:12:33 -0700 (PDT) From: Matthew Dillon <dillon@apollo.backplane.com> To: freebsd-hackers@freefall.freebsd.org Subject: PR kern/18346 - struct file ref count is a short, can be overflowed Message-ID: <200005141912.MAA07098@apollo.backplane.com>
next in thread | raw e-mail | index | archive | help
PR kern/18346
I would like to bump struct file f_count and f_msgcount from
a short to an int, in both 5.x and 4.x, because the program
supplied with the PR can demonstratably crash the machine from
userland and cause other serious problems, such as file descriptor
stealing (what happens when you roll the ref count to 0?). Any
objections?
Modules that use the struct file directly:
(misc in-kernel modules)
miscsf/portal
miscfs/union
miscfs/fdesc
miscfs/fifofs
netgraph
dev/streams
linux module
Programs:
'pstat' program
'fstat' program
-Matt
Matthew Dillon
<dillon@backplane.com>
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200005141912.MAA07098>