Messages in this thread | | | Date | Wed, 27 Jan 1999 14:04:27 +0700 | From | Agus Budy Wuysang <> | Subject | Re: 2.2.0 SECURITY |
| |
int main(void) { int i;
*(&i + 10000) = 0; return 0; }
% gcc -o try try.c .... 'try' generates core with 0600 permission % ldd ./core
and yes the machine locks (both root & non-root)
kernel gives warning: kernel: free_one_pmd: bad directory entry 000001e3 kernel: stuck on TLB IPI wait (CPU#1) just before dying
glibc 2.0.7-19 RH 5.1 pgcc 1.0.3 Dell Optiplex dual PPro 200MHz
the kernel also generates lots of "spurious APIC interrupt warning that should never happen".
Richard Gooch wrote: > > Dan Burcaw writes: > > > > There is a bug that works only on the 2.2.0 kernel that will allow root > > and non-root users to crash the machine (the system reboots). > > > > To replicate this bug do following: > > > > Take any core file, and as normal user or root run: ldd core > > > > The machine will reboot, saying that it cannot get execution permissions > > for ./core > > > > As far as I can tell, this problem only affects x86 machines running > > 2.2.0. I know that PPC is not affected. > > Just tried this on a dual PPro: > > % cat > try.c > void main () > { > * (unsigned int *) 0 = 0; > } > % cc -o try try.c > % ./try > Segmentation fault > % ldd core > % dmesg | tail -1 > perfmon: v0.4 (19990127) Richard Gooch (rgooch@atnf.csiro.au), 2 counters > > Nope, doesn't cause a reboot, panic, Oops or any problems > here. Running as root makes no difference. > > Regards, > > Richard....
-- +---| Netscape Communicator 4.x |---| Powered by Linux 2.1.x |---+ |/v\ Agus Budy Wuysang MIS Department | | | Phone: +62-21-344-1316 ext 317 GSM: +62-816-1972-051 | +--------| http://www.rad.net.id/users/personal/s/supes |--------+ -----BEGIN GEEK CODE BLOCK----- Version: 3.1 GCS/IT dx s: a- C+++ UL++++$ P- L+++(++++) E--- W++ N+++ o? K? w-- O- M- V-- PS+ PE Y-- PGP t+@ 5 X+ R- tv- b+ DI? D++(+) G e++ h* r+ y++ ------END GEEK CODE BLOCK------
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |