Messages in this thread | | | From | (Hans-Joachim Baader) | Subject | Evil floppy driver bug | Date | Thu, 2 Apr 1998 21:27:28 +0200 (MET DST) |
| |
Did you know every ordinary user can crash your Linux box?
The only requirements are: Run dosemu Try to access the floppy drive a: from within or outside dosemu
Sometimes this gives a register dump, sometimes it just dies. In my log the only thing I found was this:
Apr 2 19:42:43 grumbeer kernel: inserting floppy driver for 2.0.33 Apr 2 19:42:43 grumbeer kernel: floppy0: Assuming standard floppy hardware Apr 2 19:42:43 grumbeer kernel: Floppy drive(s): fd0 is 1.44M Apr 2 19:42:43 grumbeer kernel: floppy0: Unable to grab IRQ6 for the floppy dri ver Apr 2 19:42:52 grumbeer kernel: kernel paging request at virtual address c489e f74 Apr 2 19:42:52 grumbeer kernel: current->tss.cr3 = 0389a000, 4r3 = 0389a000
I used modutils 2.1.85 and stock 2.0.33 kernel, only patches are bootprom and nfs-swap patches.
I posted a description of this bug about two (or 3?) years ago and I think it was present in all kernels and dosemu versions since. Unfortunately nobody seemed to care. I hope this time people are more interested since it is also security related.
hjb
Kernel configuration:
CONFIG_EXPERIMENTAL=y CONFIG_MODULES=y CONFIG_MODVERSIONS=y CONFIG_KERNELD=y CONFIG_NET=y CONFIG_PCI=y CONFIG_PCI_OPTIMIZE=y CONFIG_SYSVIPC=y CONFIG_BINFMT_AOUT=m CONFIG_BINFMT_ELF=y CONFIG_BINFMT_JAVA=m CONFIG_KERNEL_ELF=y CONFIG_M486=y CONFIG_BLK_DEV_FD=m CONFIG_BLK_DEV_IDE=y CONFIG_BLK_DEV_IDECD=y CONFIG_BLK_DEV_CMD640=y CONFIG_BLK_DEV_RZ1000=y CONFIG_BLK_DEV_LOOP=m CONFIG_BLK_DEV_MD=y CONFIG_MD_LINEAR=m CONFIG_MD_STRIPED=m CONFIG_BLK_DEV_RAM=y CONFIG_BLK_DEV_INITRD=y CONFIG_FIREWALL=y CONFIG_NET_ALIAS=y CONFIG_INET=y CONFIG_IP_FORWARD=y CONFIG_SYN_COOKIES=y CONFIG_RST_COOKIES=y CONFIG_IP_FIREWALL=y CONFIG_IP_FIREWALL_VERBOSE=y CONFIG_IP_MASQUERADE=y CONFIG_IP_MASQUERADE_ICMP=y CONFIG_IP_ACCT=y CONFIG_NET_IPIP=m CONFIG_IP_ALIAS=m CONFIG_INET_RARP=m CONFIG_IP_NOSR=y CONFIG_SKB_LARGE=y CONFIG_IPX=m CONFIG_ATALK=m CONFIG_AX25=y CONFIG_BPQETHER=y CONFIG_NETROM=y CONFIG_SCSI=y CONFIG_BLK_DEV_SD=y CONFIG_CHR_DEV_ST=m CONFIG_BLK_DEV_SR=m CONFIG_CHR_DEV_SG=m CONFIG_SCSI_CONSTANTS=y CONFIG_SCSI_7000FASST=m CONFIG_SCSI_AHA152X=m CONFIG_SCSI_AHA1542=m CONFIG_SCSI_AHA1740=m CONFIG_SCSI_AIC7XXX=m CONFIG_AIC7XXX_TAGGED_QUEUEING=y CONFIG_OVERRIDE_CMDS=y CONFIG_AIC7XXX_PROC_STATS=y CONFIG_SCSI_ADVANSYS=m CONFIG_SCSI_IN2000=m CONFIG_SCSI_AM53C974=m CONFIG_SCSI_BUSLOGIC=m CONFIG_SCSI_DTC3280=m CONFIG_SCSI_EATA_DMA=m CONFIG_SCSI_EATA_PIO=m CONFIG_SCSI_EATA=m CONFIG_SCSI_EATA_TAGGED_QUEUE=y CONFIG_SCSI_EATA_LINKED_COMMANDS=y CONFIG_SCSI_FUTURE_DOMAIN=m CONFIG_SCSI_GENERIC_NCR5380=m CONFIG_SCSI_GENERIC_NCR53C400=y CONFIG_SCSI_G_NCR5380_PORT=y CONFIG_SCSI_NCR53C406A=m CONFIG_SCSI_NCR53C7xx=m CONFIG_SCSI_NCR53C7xx_FAST=y CONFIG_SCSI_NCR53C7xx_DISCONNECT=y CONFIG_SCSI_NCR53C8XX=y CONFIG_SCSI_NCR53C8XX_NVRAM_DETECT=y CONFIG_SCSI_NCR53C8XX_TAGGED_QUEUE=y CONFIG_SCSI_PPA=m CONFIG_SCSI_PAS16=m CONFIG_SCSI_QLOGIC_FAS=m CONFIG_SCSI_QLOGIC_ISP=m CONFIG_SCSI_SEAGATE=m CONFIG_SCSI_DC390T=m CONFIG_SCSI_T128=m CONFIG_SCSI_U14_34F=m CONFIG_SCSI_U14_34F_LINKED_COMMANDS=y CONFIG_SCSI_ULTRASTOR=m CONFIG_SCSI_GDTH=m CONFIG_NETDEVICES=y CONFIG_DUMMY=m CONFIG_EQUALIZER=m CONFIG_DLCI=m CONFIG_SDLA=m CONFIG_PLIP=m CONFIG_PPP=m CONFIG_SLIP=m CONFIG_SLIP_COMPRESSED=y CONFIG_NET_RADIO=y CONFIG_BAYCOM=m CONFIG_STRIP=m CONFIG_WAVELAN=m CONFIG_WIC=m CONFIG_SCC=m CONFIG_NET_ETHERNET=y CONFIG_NET_VENDOR_3COM=y CONFIG_EL1=m CONFIG_EL2=m CONFIG_ELPLUS=m CONFIG_EL16=m CONFIG_EL3=m CONFIG_VORTEX=m CONFIG_NET_VENDOR_SMC=y CONFIG_WD80x3=m CONFIG_ULTRA=m CONFIG_ULTRA32=m CONFIG_SMC9194=m CONFIG_NET_ISA=y CONFIG_AT1700=m CONFIG_E2100=m CONFIG_DEPCA=m CONFIG_EWRK3=m CONFIG_EEXPRESS=m CONFIG_EEXPRESS_PRO=m CONFIG_FMV18X=m CONFIG_HPLAN_PLUS=m CONFIG_HPLAN=m CONFIG_HP100=m CONFIG_ETH16I=m CONFIG_NE2000=m CONFIG_NI52=m CONFIG_NI65=m CONFIG_NET_EISA=y CONFIG_AC3200=m CONFIG_APRICOT=m CONFIG_EEXPRESS_PRO100B=m CONFIG_DE4X5=m CONFIG_DEC_ELCP=m CONFIG_DGRS=m CONFIG_NET_POCKET=y CONFIG_DE600=m CONFIG_DE620=m CONFIG_TR=y CONFIG_IBMTR=m CONFIG_ARCNET=m CONFIG_ISDN=m CONFIG_ISDN_PPP=y CONFIG_ISDN_PPP_VJ=y CONFIG_ISDN_MPP=y CONFIG_ISDN_AUDIO=y CONFIG_ISDN_DRV_ICN=m CONFIG_ISDN_DRV_PCBIT=m CONFIG_ISDN_DRV_HISAX=m CONFIG_HISAX_EURO=y CONFIG_HISAX_16_3=y CONFIG_ISDN_DRV_SC=m CONFIG_ISDN_DRV_AVMB1=m CONFIG_ISDN_DRV_AVMB1_VERBOSE_REASON=y CONFIG_CD_NO_IDESCSI=y CONFIG_AZTCD=m CONFIG_GSCD=m CONFIG_SBPCD=m CONFIG_MCD=m CONFIG_MCDX=m CONFIG_OPTCD=m CONFIG_CM206=m CONFIG_SJCD=m CONFIG_CDI_INIT=y CONFIG_ISP16_CDI=m CONFIG_CDU31A=m CONFIG_CDU535=m CONFIG_QUOTA=y CONFIG_MINIX_FS=y CONFIG_EXT2_FS=y CONFIG_XIA_FS=m CONFIG_FAT_FS=m CONFIG_MSDOS_FS=m CONFIG_VFAT_FS=m CONFIG_UMSDOS_FS=m CONFIG_PROC_FS=y CONFIG_NFS_FS=y CONFIG_SMB_FS=m CONFIG_NCP_FS=m CONFIG_ISO9660_FS=m CONFIG_HPFS_FS=m CONFIG_SYSV_FS=m CONFIG_AUTOFS_FS=m CONFIG_AFFS_FS=m CONFIG_AMIGA_PARTITION=y CONFIG_UFS_FS=m CONFIG_BSD_DISKLABEL=y CONFIG_SMD_DISKLABEL=y CONFIG_SERIAL=y CONFIG_CYCLADES=m CONFIG_STALDRV=y CONFIG_STALLION=m CONFIG_ISTALLION=m CONFIG_RISCOM8=m CONFIG_PRINTER=m CONFIG_SPECIALIX=m CONFIG_MOUSE=y CONFIG_ATIXL_BUSMOUSE=m CONFIG_BUSMOUSE=m CONFIG_MS_BUSMOUSE=m CONFIG_PSMOUSE=m CONFIG_FTAPE=m CONFIG_WATCHDOG=y CONFIG_WDT=m CONFIG_SOFT_WATCHDOG=m CONFIG_PCWATCHDOG=m CONFIG_RTC=y CONFIG_SOUND=m CONFIG_SB=y CONFIG_ADLIB=y CONFIG_AUDIO=y CONFIG_MIDI=y CONFIG_YM3812=y
-- Veni, Vidi, VISA: I came, I saw, I did a little shopping.
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu
| |