lkml.org 
[lkml]   [1999]   [Jan]   [27]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: 2.2.0 SECURITY
int main(void)
{
int i;

*(&i + 10000) = 0;
return 0;
}

% gcc -o try try.c
....
'try' generates core with 0600 permission
% ldd ./core

and yes the machine locks (both root & non-root)

kernel gives warning:
kernel: free_one_pmd: bad directory entry 000001e3
kernel: stuck on TLB IPI wait (CPU#1)
just before dying

glibc 2.0.7-19 RH 5.1
pgcc 1.0.3
Dell Optiplex dual PPro 200MHz

the kernel also generates lots of "spurious APIC interrupt
warning that should never happen".

Richard Gooch wrote:
>
> Dan Burcaw writes:
> >
> > There is a bug that works only on the 2.2.0 kernel that will allow root
> > and non-root users to crash the machine (the system reboots).
> >
> > To replicate this bug do following:
> >
> > Take any core file, and as normal user or root run: ldd core
> >
> > The machine will reboot, saying that it cannot get execution permissions
> > for ./core
> >
> > As far as I can tell, this problem only affects x86 machines running
> > 2.2.0. I know that PPC is not affected.
>
> Just tried this on a dual PPro:
>
> % cat > try.c
> void main ()
> {
> * (unsigned int *) 0 = 0;
> }
> % cc -o try try.c
> % ./try
> Segmentation fault
> % ldd core
> % dmesg | tail -1
> perfmon: v0.4 (19990127) Richard Gooch (rgooch@atnf.csiro.au), 2 counters
>
> Nope, doesn't cause a reboot, panic, Oops or any problems
> here. Running as root makes no difference.
>
> Regards,
>
> Richard....

--
+---| Netscape Communicator 4.x |---| Powered by Linux 2.1.x |---+
|/v\ Agus Budy Wuysang MIS Department |
| | Phone: +62-21-344-1316 ext 317 GSM: +62-816-1972-051 |
+--------| http://www.rad.net.id/users/personal/s/supes |--------+
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GCS/IT dx s: a- C+++ UL++++$ P- L+++(++++) E--- W++ N+++ o? K? w-- O-
M- V-- PS+ PE Y-- PGP t+@ 5 X+ R- tv- b+ DI? D++(+) G e++ h* r+ y++
------END GEEK CODE BLOCK------

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:50    [W:0.128 / U:1.172 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site