kern/127054: perl causes panic

[Ben Wilber]

>Number:         127054
>Category:       kern
>Synopsis:       perl causes panic
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Sep 02 22:10:00 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator:     Ben Wilber
>Release:        FreeBSD 8.0-CURRENT amd64
>Organization:
>Environment:
System: FreeBSD exodus 8.0-CURRENT FreeBSD 8.0-CURRENT #39: Sun Aug 31 09:17:23 EDT 2008 bw at exodus:/usr/obj/usr/src/sys/COMRADE amd64

Kernel config:

include GENERIC

ident COMRADE

nooptions INVARIANTS
nooptions INVARIANT_SUPPORT
nooptions WITNESS
nooptions WITNESS_SKIPSPIN

options HZ=1000
options DEVICE_POLLING

options         ALTQ
options         ALTQ_CBQ        # Class Based Queueing
options         ALTQ_RED        # Random Early Detection
options         ALTQ_RIO        # RED In/Out
options         ALTQ_HFSC       # Hierarchical Packet Scheduler
options         ALTQ_CDNR       # Traffic conditioner
options         ALTQ_PRIQ       # Priority Queueing

device			crypto
options			IPSEC

>Description:

Perl's CPAN and CPANPLUS shells cause kernel panic.

Fatal trap 12: page faSep  2 17:22:35 ulexodus sshd[2664t w]: error: chown hil/dev/pts/0 0 0 fe iailed: No such fn kile or directoryern
6 failed: No suc5 exodus sshd[26 m64]: error: chmoodd /dev/pts/0 066e
                h file or directcpory
uid = 2; apic id = 06
fault virtual address   = 0x268
fault code              = supervisor read data, page not present
instruction pointer     = 0x8:0xffffffff804ca686
stack pointer           = 0x10:0xfffffffea981ba10
frame pointer           = 0x10:0xfffffffea981ba30
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 2670 (sshd)
[thread pid 2670 tid 100223 ]
Stopped at      _mtx_lock_sleep+0x47:   movl    0x268(%rcx),%eax

db> bt
Tracing pid 2670 tid 100223 td 0xffffff00055b8360
_mtx_lock_sleep() at _mtx_lock_sleep+0x47
ptsdev_read() at ptsdev_read+0x97
dofileread() at dofileread+0x96
kern_readv() at kern_readv+0x46
read() at read+0x4d
syscall() at syscall+0x330
Xfast_syscall() at Xfast_syscall+0xab
--- syscall (3, FreeBSD ELF64, read), rip = 0x80139cb4c, rsp = 0x7fffffffa268, rbp = 0x60e600 ---

>How-To-Repeat:

% perl -MCPAN -e shell
Operator or semicolon missing before &__inline at (eval 90) line 1.
Ambiguous use of & resolved as operator & at (eval 90) line 1.
Use of uninitialized value in bitwise and (&) at (eval 283) line 1.
Use of uninitialized value in bitwise and (&) at (eval 285) line 1.

cpan shell -- CPAN exploration and modules installation (v1.7602)
ReadLine support enabled

Connection to exodus closed.

>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted: