OpenSolaris

Printable Version Enter a New Search
Bug ID 6806424
Synopsis Improper checking could lead to panic
State 10-Fix Delivered (Fix available in build)
Category:Subcategory kernel:nfsv4
Keywords
Responsible Engineer James Wahlig
Reported Against
Duplicate Of
Introduced In solaris_nevada
Commit to Fix snv_110
Fixed In snv_110
Release Fixed solaris_nevada(snv_110)
Related Bugs
Submit Date 17-February-2009
Last Update Date 11-March-2009
Description 
While trying to find the root cause to CR 6711844 jurassic-x4600 assert: vp->v_shrlocks == 0L, file: ../../common/fs/vnode.c, I found coding errors in rfs4_findfile_withlock().

When using VSD to get the rfs4_file_t instead of an rfs4_dbsearch(), not all of the proper checking is done before returning.  This could lead to a NULL pointer panic.
Work Around 
N/A
Comments 
Is this a possible DoS vector?  If so, this bug should be tagged
'security'.