svn commit: r251088 - head/crypto/openssh

Bryan Drewery bdrewery at FreeBSD.org
Wed May 29 12:44:22 UTC 2013


On 5/29/2013 7:36 AM, Dag-Erling Smørgrav wrote:
> Pawel Jakub Dawidek <pjd at FreeBSD.org> writes:
>> Which library is needed for AES-NI? I don't see any engine in /usr/lib/
>> that implements AES-NI support. Could you be more specific?
> 
> Ah, you're right.  Bryan (cc:ed) did the analysis and I misunderstood
> his report.  I just ran through the steps to reproduce the issue, and
> what happens is that a CRIOGET ioctl cal (which is supposed to allocate
> and return a file descriptor) fails due to setrlimit(RLIMIT_FSIZE, 0):
> 
>  90344 sshd     CALL  setrlimit(RLIMIT_NOFILE,0x7fffffffca10)
>  90344 sshd     RET   setrlimit 0

This is as far as I went. I wasn't able to debug it further with the
RLIMIT_FSIZE set, as removing it allowed the functionality to work. I
incorrectly assumed it was due to dynamic library loading later. Sorry
for the miscommunication.

>  [...]
>  90344 sshd     CALL  ioctl(0x3,CRIOGET,0x7fffffffcb4c)
>  90344 sshd     RET   ioctl -1 errno 24 Too many open files
> 
> Note that you have to remove the setrlimit(RLIMIT_FSIZE, 0) call in
> sandbox-rlimit.c to debug this, otherwise ktrace stops at that point:


-- 
Regards,
Bryan Drewery

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 899 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/svn-src-all/attachments/20130529/fdc03793/attachment.sig>


More information about the svn-src-all mailing list