kern/82905: mount_nullfs can reboot system

[Kris Kennaway]

The following reply was made to PR kern/82905; it has been noted by GNATS.

From: Kris Kennaway <kris at obsecurity.org>
To: Adrian Czerniak <adriancz at go2.pl>
Cc: freebsd-gnats-submit at FreeBSD.org
Subject: Re: kern/82905: mount_nullfs can reboot system
Date: Fri, 29 Jul 2005 17:52:36 -0400

 On Sat, Jul 02, 2005 at 08:52:13PM +0000, Adrian Czerniak wrote:
 > 
 > >Number:         82905
 > >Category:       kern
 > >Synopsis:       mount_nullfs can reboot system
 > >Confidential:   no
 > >Severity:       serious
 > >Priority:       high
 > >Responsible:    freebsd-bugs
 > >State:          open
 > >Quarter:        
 > >Keywords:       
 > >Date-Required:
 > >Class:          sw-bug
 > >Submitter-Id:   current-users
 > >Arrival-Date:   Sat Jul 02 21:00:32 GMT 2005
 > >Closed-Date:
 > >Last-Modified:
 > >Originator:     Adrian Czerniak
 > >Release:        6-CURRENT
 > >Organization:
 > >Environment:
 > FreeBSD 68-71.is.net.pl 6.0-CURRENT FreeBSD 6.0-CURRENT #0: Sat Jul  2 15:27:02 CEST 2005     abaddon at 68-71.is.net.pl:/usr/obj/usr/src/sys/abaddon  i386
 > >Description:
 > Try to do:
 > mount_nullfs /mnt/foo /some/other/place (where foo is mounted fat32 partition) and enter to /some/other/place, system will reboot.
 > >How-To-Repeat:
 > mount_nullfs /mnt/foo /some/other/place (where foo is mounted fat32 partition) and enter to /some/other/place
 
 Does it panic, or just reboot? Make sure you are at the system console
 and not running X, or you won't see the panic string.  If it panics,
 please see the chapter on kernel debugging in the developers' handbook
 to learn how to obtain the information necessary to debug this.
 
 Kris