On Tue, Dec 08, 2015 at 12:31:09AM +0000, Stuart Henderson wrote: > On 2015/12/07 15:44, Theo de Raadt wrote: > > This bug report totally sucks. > > > > Have you ever heard of ktrace, and if you have, why did you not try > > to reproduce it? > > > > You want us to reproduce it? Why? > > > > > Hi, > > > I ran across an issue with httpd(8) on 5.8-RELEASE & -CURRENT (2/12/2015 > > > snapshot) where fetching a .hidden file located on a CD through httpd > > > results in httpd crashing (no core file or error message logged). > > > > > > To reproduce, mount CD in a location which is served by httpd. eg CentOS > > > minimal install iso[1] has a hidden file in the root called .treeinfo > > > > > > Try to fetch http://myweb/.treeinfo > > > > > > Of course this is not a common scenario found in production, I happened > > > to run into it whist taking a shortcut to save time & disk space by > > > mounting the CentOS iso on a virtualbox guest which was running OpenBSD. > > > > > > > > > Sevan > > > [1] > > > http://isoredirect.centos.org/centos/7/isos/x86_64/CentOS-7-x86_64-Minimal-1503-01.iso > > > > > > > It's not that bad a report, it has everything necessary to reproduce, > tested on release and -current so it's obviously not pledge related. > > There's one thing to add though, it looks like it happens for any file on > cd9660, not just dotfiles.
It is worth pointing out that httpd has had trouble serving files off specific filesystems in the past due to kqueue issues. cd9660_vops does not currently set .vop_kqfilter, does anything change if you set EVENT_NOKQUEUE before running httpd?
