From nobody@FreeBSD.org  Tue Apr  9 03:40:07 2002
Return-Path: <nobody@FreeBSD.org>
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP id BE85737B417
	for <freebsd-gnats-submit@FreeBSD.org>; Tue,  9 Apr 2002 03:40:06 -0700 (PDT)
Received: (from nobody@localhost)
	by freefall.freebsd.org (8.11.6/8.11.6) id g39Ae6C60474;
	Tue, 9 Apr 2002 03:40:06 -0700 (PDT)
	(envelope-from nobody)
Message-Id: <200204091040.g39Ae6C60474@freefall.freebsd.org>
Date: Tue, 9 Apr 2002 03:40:06 -0700 (PDT)
From: Peter Kusenda <peter.kusenda@adn.sk>
To: freebsd-gnats-submit@FreeBSD.org
Subject: fdesc file system (partially) crashes FreeBSD 4.1 and 4.3
X-Send-Pr-Version: www-1.0

>Number:         36923
>Category:       misc
>Synopsis:       fdesc file system (partially) crashes FreeBSD 4.1 and 4.3
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    ceri
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Apr 09 03:50:01 PDT 2002
>Closed-Date:    Sun Jun 08 11:02:52 PDT 2003
>Last-Modified:  Sun Jun 08 11:02:52 PDT 2003
>Originator:     Peter Kusenda
>Release:        4.1
>Organization:
>Environment:
FreeBSD 4.1
FreeBSD 4.3
(sorry do not have FreeBSD box by hand, right now)
>Description:
Ordinary user is able to put FreeBSD box (tested on 4.1 and 4.3) into rather unusable state if fdescfs is mounted. After mounting fdescfs on /fdesc mount-point, an ordinary user enters the directory (cd /fdesc) and (in csh, tcsh) types: more std
and presses TAB to let the shell add the rest. After pressing TAB key, system becomes unresponsive, except of possibility to switch between virtual consoles, echoing pinging and maybe doing some other network related work as routing, NATing and so. Network services (daemons) do not respond either. There is no further possibility to manage the system. I have no chance to try it on latest version.
>How-To-Repeat:
Sorry, if this is not really accurate, I do not have a FreeBSD box by hand, right now.

Root mounts the fdescfs file system:
# mkdir /fdesc
# mount_fdesc fdesc /fdesc

A user in csh/tcsh shell tries to type more std and presses Tab key:
> cd /fdesc
> ls
fd/ stdin stdout stderr
> more std[Tab]

now the console I/O and network services hang.

>Fix:

>Release-Note:
>Audit-Trail:

From: David Malone <dwmalone@maths.tcd.ie>
To: Peter Kusenda <peter.kusenda@adn.sk>
Cc: freebsd-gnats-submit@FreeBSD.org
Subject: Re: misc/36923: fdesc file system (partially) crashes FreeBSD 4.1 and 4.3
Date: Wed, 10 Apr 2002 21:57:29 +0100

 On Tue, Apr 09, 2002 at 03:40:06AM -0700, Peter Kusenda wrote:
 > Root mounts the fdescfs file system:
 > # mkdir /fdesc
 > # mount_fdesc fdesc /fdesc
 > 
 > A user in csh/tcsh shell tries to type more std and presses Tab key:
 > > cd /fdesc
 > > ls
 > fd/ stdin stdout stderr
 > > more std[Tab]
 
 I can't reproduce this on a FreeBSD 4.5-STABLE machine.  (Infact,
 I don't think std{in,out,err} have been in fdescfs for quite some
 time - could you be working with out of date modules?).
 
 	David.
 
 21:42:cement 1# mkdir /fdesc
 21:42:cement 2# mount_fdesc fdesc /fdesc/
 21:43:cement 3# cd /fdesc/
 0% 1% 2% 3/
 21:43:cement 4# ls -la
 total 1
 dr-xr-xr-x   2 root      wheel       512 Mar 20 16:41 .
 drwxr-xr-x  21 root      wheel       512 Apr 10 21:43 ..
 crwx-w----   1 dwmalone  tty      5,   1 Apr 10 21:43 0
 crwx-w----   1 dwmalone  tty      5,   1 Apr 10 21:43 1
 crwx-w----   1 dwmalone  tty      5,   1 Apr 10 21:43 2
 d---------   1 root      wheel       512 Mar 20 16:41 3
 d---------   1 root      wheel       512 Mar 20 16:41 4
 d---------   1 root      wheel       512 Mar 20 16:41 5
 21:43:cement 5# more st
 
State-Changed-From-To: open->feedback 
State-Changed-By: dwmalone 
State-Changed-When: Tue Jun 11 13:57:43 PDT 2002 
State-Changed-Why:  
I tried to reproduce this a while back and had no luck. 
I wonder if you could check if the problem exists in 4.6 
when it is released? 

http://www.freebsd.org/cgi/query-pr.cgi?pr=36923 
State-Changed-From-To: feedback->closed 
State-Changed-By: ceri 
State-Changed-When: Sun Jun 8 11:02:50 PDT 2003 
State-Changed-Why:  
Feedback timeout (6 months or more). 
I will handle any feedback that this closure generates. 


Responsible-Changed-From-To: freebsd-bugs->ceri 
Responsible-Changed-By: ceri 
Responsible-Changed-When: Sun Jun 8 11:02:50 PDT 2003 
Responsible-Changed-Why:  
Feedback timeout (6 months or more). 
I will handle any feedback that this closure generates. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=36923 
>Unformatted:
