Subject: Re: NetBSD Security Advisory 1999-008
To: Philip Tait <Philip.Tait@phxase.allied.com>
From: Bill Studenmund <skippy@macro.Stanford.EDU>
List: port-pmax
Date: 04/15/1999 11:22:35
On Thu, 15 Apr 1999, Philip Tait wrote:
> This advisory does not seem to be accurate. 'syssrc.tgz' for NetBSD 1.3.3 contains
> what appears to be a corrected version of vfs_lookup.c. Also, I cannot reproduce
Please check again. I just checked the 1.3.3 syssrc.tgz file, and
vfs_lookup.c contained:
if ((cnp->cn_flags & LOCKPARENT) && ndp->ni_pathlen == 1)
VOP_UNLOCK(ndp->ni_dvp);
The ndp->ni_pathlen == 1 is wrong, and the focus of the security patch.
> the problem on my system:
>
> $ uname -a
> NetBSD phxtst45 1.3.3 NetBSD 1.3.3 (GENERIC) #0: Sat Dec 12 15:08:02 EST 1998
> root@vlad:/usr/src/sys/arch/pmax/compile/GENERIC pmax
> $ ln -s ./ test
Note: you must repeat the above command TWICE to have problems. If only
one occurence caused problems, the bug would have been found long ago. :-)
Also, you are on pmax which seems to have its own unique failure mode,
which we don't understand at the moment.
> $ ls -l test
> lrwxr-xr-x 1 pjt wheel 2 Apr 15 10:12 test -> ./
Take care,
Bill