From aj@stack.nl  Wed Jun 10 14:10:02 1998
Received: from terra.stack.nl (terra.stack.nl [131.155.140.128])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id OAA17865
          for <FreeBSD-gnats-submit@freebsd.org>; Wed, 10 Jun 1998 14:09:59 -0700 (PDT)
          (envelope-from aj@stack.nl)
Received: from turtle.stack.nl (vmailer@turtle.stack.nl [131.155.140.132]) by terra.stack.nl (8.8.7) with ESMTP id XAA24376 for <FreeBSD-gnats-submit@freebsd.org>; Wed, 10 Jun 1998 23:09:43 +0200 (MET DST)
Received: by turtle.stack.nl (VMailer, from userid 1033)
	id C1362C55; Wed, 10 Jun 1998 23:09:44 +0200 (CEST)
Message-Id: <19980610210944.C1362C55@turtle.stack.nl>
Date: Wed, 10 Jun 1998 23:09:44 +0200 (CEST)
From: aj@stack.nl (Arend-Jan Wijtzes)
To: FreeBSD-gnats-submit@freebsd.org
Subject: crash from userland 2

>Number:         6908
>Category:       kern
>Synopsis:       kernel crash from user land
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Jun 10 14:10:00 PDT 1998
>Closed-Date:    Wed May 30 01:47:18 PDT 2001
>Last-Modified:  Wed May 30 01:48:22 PDT 2001
>Originator:     Arend-jan Wijtzes
>Release:        FreeBSD 2.2.6-STABLE i386
>Organization:
M.C.G.V. Stack
>Environment:

Nothing special 

>Description:

When making a tar to /dev/fd0 the idle process will take
up all CPU and finally the machine locks up. This will
take even less time when there is no floppy in the drive.
Of course one should not make a tar to /dev/fd0, but this
way any user can crash the system when he/she has
permission to write to the fd* device(s).

>How-To-Repeat:

tar cf /dev/fd0 /

>Fix:

None. fix permissions so users can't write do fd*
but use rfd*.
>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->closed 
State-Changed-By: sos 
State-Changed-When: Wed May 30 01:47:18 PDT 2001 
State-Changed-Why:  
Although there are still issues with the fd device, this 
seems to work now. 

http://www.FreeBSD.org/cgi/query-pr.cgi?pr=6908 
>Unformatted:
SEND-PR: -*- send-pr -*-
SEND-PR: Lines starting with `SEND-PR' will be removed automatically, as
SEND-PR: will all comments (text enclosed in `<' and `>').
SEND-PR: 
SEND-PR: Please consult the send-pr man page `send-pr(1)' or the Texinfo
SEND-PR: manual if you are not sure how to fill out a problem report.
SEND-PR:
SEND-PR: Note that the Synopsis field is mandatory.  The Subject (for
SEND-PR: the mail) will be made the same as Synopsis unless explicitly
SEND-PR: changed.
SEND-PR:
SEND-PR: Choose from the following categories:
SEND-PR:
SEND-PR: bin   conf  docs  gnu   i386  kern  misc  ports 
SEND-PR:
To: FreeBSD-gnats-submit@freebsd.org
Subject: 
From: aj@stack.nl
Reply-To: aj@stack.nl
X-send-pr-version: 3.2


