From nobody@www.freebsd.org  Wed Jun 19 15:38:19 2002
Return-Path: <nobody@www.freebsd.org>
Received: from nwww.freebsd.org (www.FreeBSD.org [216.136.204.117])
	by hub.freebsd.org (Postfix) with ESMTP id 71D7537B401
	for <freebsd-gnats-submit@FreeBSD.org>; Wed, 19 Jun 2002 15:38:19 -0700 (PDT)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by nwww.freebsd.org (8.12.2/8.12.2) with ESMTP id g5JMcJhG036359
	for <freebsd-gnats-submit@FreeBSD.org>; Wed, 19 Jun 2002 15:38:19 -0700 (PDT)
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.12.2/8.12.2/Submit) id g5JMcJM4036357;
	Wed, 19 Jun 2002 15:38:19 -0700 (PDT)
Message-Id: <200206192238.g5JMcJM4036357@www.freebsd.org>
Date: Wed, 19 Jun 2002 15:38:19 -0700 (PDT)
From: James Gritton <gritton@iserver.com>
To: freebsd-gnats-submit@FreeBSD.org
Subject: SVR4 calls chgproccnt with the wrong argument
X-Send-Pr-Version: www-1.0

>Number:         39547
>Category:       kern
>Synopsis:       SVR4 calls chgproccnt with the wrong argument
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Jun 19 15:40:03 PDT 2002
>Closed-Date:    Thu Jun 20 11:25:19 PDT 2002
>Last-Modified:  Thu Jun 20 11:25:19 PDT 2002
>Originator:     James Gritton
>Release:        4.6
>Organization:
Verio Web Hosting
>Environment:
FreeBSD  4.6-RELEASE FreeBSD 4.6-RELEASE #0: Tue Jun 11 06:14:12 GMT 2002     murray@builder.freebsdmall.com:/usr/src/sys/compile/GENERIC  i386
>Description:
The SVR4 emulation function svr4_sys_waitsys in sys/svr4/svr4_misc.c calls chgproccnt(), passing it a UID (q->p_cred->p_ruid) instead of a pointer to struct uidinfo, as the call is expecting.  Chgproccnt wants to dereference this pointer.
>How-To-Repeat:
I didn't actually do anything to run the code, though it would seem pretty simple to kill the system with the proper UID.
>Fix:
Pass q->p_cred->p_uidinfo instead of q->p_cred->p_ruid.
>Release-Note:
>Audit-Trail:

From: Robert Drehmel <robert@ferrari-electronic.de>
To: freebsd-gnats-submit@FreeBSD.org, gritton@iserver.com
Cc:  
Subject: Re: kern/39547: SVR4 calls chgproccnt with the wrong argument
Date: Thu, 20 Jun 2002 12:43:09 +0200

 Hi James,
 
 it seems this was fixed in revision 1.20 of
 'src/sys/compat/svr4/svr4_misc.c'.
 Can you tell me at which revision you are looking at?
 
 Thanks,
 -robert
State-Changed-From-To: open->closed 
State-Changed-By: robert 
State-Changed-When: Thu Jun 20 11:24:09 PDT 2002 
State-Changed-Why:  
A fix was commited to -STABLE.  Thank you for reporting the bug! 

http://www.freebsd.org/cgi/query-pr.cgi?pr=39547 
>Unformatted:
