Re: 2.2.0 SECURITY

System Administrator (admin@intergrafix.net)
Wed, 27 Jan 1999 06:01:00 -0500 (EST)


[admin@athena admin]$ cc -o try try.c
[admin@athena admin]$ ./try
Segmentation fault
[admin@athena admin]$ ls -l core
/usr/bin/color-ls: core: No such file or directory

ldd 1.9.9
libc 5.4.38
SMP not enabled

On Wed, 27 Jan 1999, Paul wrote:

> >There is a bug that works only on the 2.2.0 kernel that will allow root
> >and non-root users to crash the machine (the system reboots).
> >
> >To replicate this bug do following:
> >
> >Take any core file, and as normal user or root run: ldd core
> >
> >The machine will reboot, saying that it cannot get execution permissions
> >for ./core
> >
> >As far as I can tell, this problem only affects x86 machines running
> >2.2.0. I know that PPC is not affected.
> >
> >Note: This problem does not occur in kernels before 2.2.0, and is
> >apparently fixed in 2.2.0ac1.
> >
> >Thanks to Gennady Gurov (gurov@frii.com) for discovering this problem.
>
> Occured here: Ppro 200, 48mb RAM, Matrox fb, Soundblaster 16, smbfs,
> IP-masq, using egcs 1.1, ide-scsi, rest is pretty vanilla
>
> Both on 2.2.0 AND 2.2.0-final
>
> ldd is from Glibc-2.0.108 (also compiled with egcs 1.1)
>
> core was from program:
> main() { * (int *) 0 = 0; }
>
> core perms were 600
>
> Note, my machine hung hard, with no reboot.
> Error message given:
> free_one_pmd: bad directory entry 000001e3
>
> Paul Laufer
>
>
> -
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@vger.rutgers.edu
> Please read the FAQ at http://www.tux.org/lkml/
>

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/