Subject: kern/4734: kernel can be crashed by NFS access on socket
To: None <gnats-bugs@gnats.netbsd.org>
From: Matthias Scheler <tron@lyssa.owl.de>
List: netbsd-bugs
Date: 12/21/1997 01:16:09
>Number: 4734
>Category: kern
>Synopsis: kernel can be crashed by NFS access on socket
>Confidential: no
>Severity: critical
>Priority: high
>Responsible: kern-bug-people (Kernel Bug People)
>State: open
>Class: sw-bug
>Submitter-Id: net
>Arrival-Date: Sat Dec 20 16:20:02 1997
>Last-Modified:
>Originator: Matthias Scheler
>Organization:
Matthias Scheler http://home.owl.de/~tron/
>Release: 971212
>Environment:
System: NetBSD lyssa 1.3_BETA NetBSD 1.3_BETA (LYSSA) #0: Fri Dec 12 11:35:29 MET 1997 tron@lyssa:/src/src/sys/arch/i386/compile/LYSSA i386
>Description:
On a NFS directory access to an Unix domain socket by an Amiga using
AmiTCP/IP's NFS client the kernel panics with this message:
panic: ffs_read: type 6
A "trace" brings up this information:
...
_ffs_read+0x84
_ufs_readdir+0x97
_nfsrv_readdir+0x767
...
>How-To-Repeat:
Mount a directory containing an Unix domain socket with AmiTCP/IP's
"ch_nfs" client and use "List" on the socket.
>Fix:
Sorry, I don't know.
>Audit-Trail:
>Unformatted: