OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: msdosfs_vnops.c : msdosfs_rename()
From: Marius Bendiksen (mbendikseunet.no)
Date: Mon Jun 12 2000 - 14:14:22 CDT

It would appear to me that, in the following section, there is the
potential for a malicious user to cause a system panic. Could anyone
confirm/disaffirm this?

        if (fvp == NULL) {
                /*
                 * From name has disappeared
                 */
                if (doingdirectory)
                        panic("rename: lost dir entry");

This is after rescanning the directory during a rename operation. Neither
the directory, nor the entry, is locked at this point, according to the
comments in the source. 

---
Marius Bendiksen

To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message