Re: fetch | sh panics system
Christian Weisgerber [EMAIL PROTECTED] wrote: The following, completely innocuous command line $ fetch -o - http://sites.inka.de/mips/unix/freebsd/xterm.shar | sh executed as a non-priviledged user, reproducibly panics the machine. It's caused by fdesc mounted on /dev/fd. I sent in a PR, kern/18952. -- Christian "naddy" Weisgerber [EMAIL PROTECTED] To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message
Re: fetch | sh panics system
Christian Weisgerber [EMAIL PROTECTED] wrote: The following, completely innocuous command line $ fetch -o - http://sites.inka.de/mips/unix/freebsd/xterm.shar | sh executed as a non-priviledged user, reproducibly panics the machine. Some people have mailed that this particular command line just works on their machines. I'm not surprised. Still there must be some sort of problem, which happens to be triggered accidentally on my box for this unlikely case. I updated to yesterday's -CURRENT, and the problem persists. This is perfectly reproducible. I'll happily provide more details on my configuration, if anybody can give me a clue what might sensibly affect this. -- Christian "naddy" Weisgerber [EMAIL PROTECTED] To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message
fetch | sh panics system
5.0-CURRENT from ~May 17, dual ppro.
The following, completely innocuous command line
$ fetch -o - http://sites.inka.de/mips/unix/freebsd/xterm.shar | sh
executed as a non-priviledged user, reproducibly panics the machine.
-
#0 boot (howto=256) at ../../kern/kern_shutdown.c:303
#1 0xc0163879 in panic (fmt=0xc028dc4f "page fault")
at ../../kern/kern_shutdown.c:553
#2 0xc025760c in trap_fatal (frame=0xc8830d74, eva=52)
at ../../i386/i386/trap.c:927
#3 0xc025727d in trap_pfault (frame=0xc8830d74, usermode=0, eva=52)
at ../../i386/i386/trap.c:820
#4 0xc0256de3 in trap (frame={tf_fs = -930938856, tf_es = -1072103408,
tf_ds = -1062797296, tf_edi = -930935184, tf_esi = -930935300,
tf_ebp = -930935340, tf_isp = -930935392, tf_ebx = -931419456,
tf_edx = 0, tf_ecx = 13, tf_eax = -930935360, tf_trapno = 12,
tf_err = 0, tf_eip = -1062106920, tf_cs = 8, tf_eflags = 66195,
tf_esp = -930935360, tf_ss = -930935300}) at ../../i386/i386/trap.c:426
#5 0xc0b188d8 in ?? ()
#6 0xc0198fae in vn_open (ndp=0xc8830ec8, fmode=1026, cmode=420)
at vnode_if.h:305
#7 0xc0195005 in open (p=0xc7df7a00, uap=0xc8830f80)
at ../../kern/vfs_syscalls.c:995
#8 0xc025793d in syscall2 (frame={tf_fs = 47, tf_es = 47, tf_ds = 47,
tf_edi = 8, tf_esi = 672168216, tf_ebp = -1077938468,
tf_isp = -930934828, tf_ebx = 672102756, tf_edx = 672168216,
tf_ecx = 15, tf_eax = 5, tf_trapno = 12, tf_err = 2, tf_eip = 672019108,
tf_cs = 31, tf_eflags = 663, tf_esp = -1077938512, tf_ss = 47})
at ../../i386/i386/trap.c:1126
#9 0xc024579e in Xint0x80_syscall ()
--
Christian "naddy" Weisgerber [EMAIL PROTECTED]
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message
Re: fetch | sh panics system
Did this on a:
FreeBSD 4.0-STABLE #1: Fri May 26 06:47659 EST92000
system and got these messages in /var/log/messages:
May 30 02:32:49 doohan /kernel: cmd conftest pid 12565 tried to use
non-present SYSVSEM
May 30 02:32:49 doohan /kernel: pid 12565 (conftest), uid 0: exited on
signal 12 (core dumped)
May 30 02:32:50 doohan /kernel: cmd conftest pid 12583 tried to use
non-present SYSVSEM
May 30 02:32:50 doohan /kernel: pid 12583 (conftest), uid 0: exited on
signal 12 (core dumped)
On Tue, 30 May 2000, Christian Weisgerber wrote:
Date: Tue, 30 May 2000 16:28:31 +0200
From: Christian Weisgerber [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: "fetch | sh" panics system
5.0-CURRENT from ~May 17, dual ppro.
The following, completely innocuous command line
$ fetch -o - http://sites.inka.de/mips/unix/freebsd/xterm.shar | sh
executed as a non-priviledged user, reproducibly panics the machine.
-
#0 boot (howto=256) at ../../kern/kern_shutdown.c:303
#1 0xc0163879 in panic (fmt=0xc028dc4f "page fault")
at ../../kern/kern_shutdown.c:553
#2 0xc025760c in trap_fatal (frame=0xc8830d74, eva=52)
at ../../i386/i386/trap.c:927
#3 0xc025727d in trap_pfault (frame=0xc8830d74, usermode=0, eva=52)
at ../../i386/i386/trap.c:820
#4 0xc0256de3 in trap (frame={tf_fs = -930938856, tf_es = -1072103408,
tf_ds = -1062797296, tf_edi = -930935184, tf_esi = -930935300,
tf_ebp = -930935340, tf_isp = -930935392, tf_ebx = -931419456,
tf_edx = 0, tf_ecx = 13, tf_eax = -930935360, tf_trapno = 12,
tf_err = 0, tf_eip = -1062106920, tf_cs = 8, tf_eflags = 66195,
tf_esp = -930935360, tf_ss = -930935300}) at ../../i386/i386/trap.c:426
#5 0xc0b188d8 in ?? ()
#6 0xc0198fae in vn_open (ndp=0xc8830ec8, fmode=1026, cmode=420)
at vnode_if.h:305
#7 0xc0195005 in open (p=0xc7df7a00, uap=0xc8830f80)
at ../../kern/vfs_syscalls.c:995
#8 0xc025793d in syscall2 (frame={tf_fs = 47, tf_es = 47, tf_ds = 47,
tf_edi = 8, tf_esi = 672168216, tf_ebp = -1077938468,
tf_isp = -930934828, tf_ebx = 672102756, tf_edx = 672168216,
tf_ecx = 15, tf_eax = 5, tf_trapno = 12, tf_err = 2, tf_eip = 672019108,
tf_cs = 31, tf_eflags = 663, tf_esp = -1077938512, tf_ss = 47})
at ../../i386/i386/trap.c:1126
#9 0xc024579e in Xint0x80_syscall ()
--
Christian "naddy" Weisgerber [EMAIL PROTECTED]
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message
--
:{ [EMAIL PROTECTED]
Andy Farkas
System Administrator
Speednet Communications
http://www.speednet.com.au/
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message
Re: fetch | sh panics system
On Tue 2000-05-30 (16:28), Christian Weisgerber wrote: 5.0-CURRENT from ~May 17, dual ppro. The following, completely innocuous command line $ fetch -o - http://sites.inka.de/mips/unix/freebsd/xterm.shar | sh (nbm@monster) /home/nbm uname -a FreeBSD monster.sunesi.com 5.0-CURRENT FreeBSD 5.0-CURRENT #12: Tue May 16 10:16:47 SAST 2000 [EMAIL PROTECTED]:/usr/src/sys/compile/SCRITCH i386 (nbm@monster) /home/nbm fetch -o - http://sites.inka.de/mips/unix/freebsd/xterm.shar | sh Receiving - (2136 bytes) 2136 bytes transferred in 0.0 seconds (4301.06 Kbytes/s) c - xterm c - xterm/pkg x - xterm/pkg/PLIST x - xterm/pkg/DESCR x - xterm/pkg/COMMENT c - xterm/files x - xterm/files/md5 x - xterm/Makefile Neil -- Neil Blakey-Milner Sunesi Clinical Systems [EMAIL PROTECTED] To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message
