ncplogin panic

[m.ehinger at ltur.de]

Antony Mawer <fbsd-stable at mawer.org> schrieb am 09.08.2006 02:08:20:


> Okay. What version of Netware are you using? What are the step-by-step
> procedures you are following in order to reproduce this (from step 1 as
> logging in to Netware or mounting the volume)?


We're using Netware Verion 6.5 over TCP/IP only.

Step 1. load ncp.ko, mount volume (mount_nwfs -A ... )
Step 2. cp /netwarefile /localfolder

Here is what strace gives me:

Script started on Thu Aug 10 10:02:46 2006
execve(0xbfbfe828, [0xbfbfed0c], [/* 0 vars */]) = 0
mmap(0, 3904, PROT_READ|PROT_WRITE, MAP_ANON, -1, 0) = 0x28074000
munmap(0x28074000, 3904)                = 0
__sysctl([...], 0x28070b98, 0xbfbfeab4, NULL, 0) = 0
mmap(0, 32768, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANON, -1, 0) = 0x28074000
issetugid(0)                            = 0
open("/etc/libmap.conf", O_RDONLY)      = -1 ENOENT (No such file or directory)
open("/var/run/ld-elf.so.hints", O_RDONLY) = 3
read(3, "_ALL\0%s:\n\0\t%o => %p (%x)\n\0\t%o (%"..., 128) = 128
lseek(3, 128, SEEK_SET)                 = 128
read(3, "/lib:/usr/lib:/usr/lib/compat:/u"..., 188) = 188
close(3)                                = 0
access("/lib/libc.so.6", F_OK)          = 0
open("/lib/libc.so.6", O_RDONLY)        = 3
fstat(3, {st_mode=0, st_size=0, ...})   = 0
read(3, "\177ELF\1\1\1\t\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\200\352"..., 4096) = 4096
mmap(0, 937984, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_NOCORE, 3, 0) = 0x2807c000
mprotect(0x28144000, 4096, PROT_READ|PROT_WRITE|PROT_EXEC) = 0
mprotect(0x28144000, 4096, PROT_READ|PROT_EXEC) = 0
mmap(0x28145000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0xc9000) = 0x28145000
mmap(0x2814b000, 90112, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANON, -1, 0) = 0x2814b000
close(3)                                = 0
sysarch(0xa, 0xbfbfeb30)                = 0
mmap(0, 584, PROT_READ|PROT_WRITE, MAP_ANON, -1, 0) = 0x28161000
munmap(0x28161000, 584)                 = 0
mmap(0, 22792, PROT_READ|PROT_WRITE, MAP_ANON, -1, 0) = 0x28161000
munmap(0x28161000, 22792)               = 0
sigprocmask(SIG_BLOCK, ~[ILL TRAP ABRT EMT FPE BUS SEGV SYS], []) = 0
sigprocmask(SIG_SETMASK, [], NULL)      = 0
syscall_416(0x1d, 0xbfbfeaf0, 0xbfbfead0) = 0
stat("/root", {st_mode=0, st_size=4294967297, ...}) = 0
umask(0777)                             = 022
umask(022)                              = 0777
readlink("/etc/malloc.conf", "°Ë", 63)  = 2
issetugid(0x2806f598)                   = 0
mmap(0, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANON, -1, 0) = 0x28161000
break(0x805d000)                        = 0
break(0x805e000)                        = 0
break(0x805f000)                        = 0
break(0x8060000)                        = 0
stat("file", {st_mode=S_IFREG|0755, st_size=12, ...}) = 0
stat("/root/file", {st_mode=0, st_size=4294967297, ...}) = 0
open("file", O_RDONLY)                  = 3
open("/root/file", O_WRONLY|O_TRUNC)    = 4
mmap(0, 12, PROT_READ, MAP_SHARED, 3, 0) = -1 EINVAL (Invalid argument)
write(2, "\0\0\0\0", 4cp: )                 = 4
write(2, "\0\0\0\0", 4file)                 = 4
write(2, ": ", 2: )                       = 2
write(2, "\0: path too long\n", 17Invalid argument
)     = 17
close(3)                                = 0
close(4)                                = 0
exit(1)                                 = ?

Script done on Thu Aug 10 10:02:46 2006