HomeFreeBSD

Fix bug that would result in a kernel crash in some cases involving

Description

Fix bug that would result in a kernel crash in some cases involving
a symlink and an autofs mount request. The crash was caused by namei()
calling bcopy() with a negative length, caused by numeric underflow:
in lookup(), in the relookup path, the ni_pathlen was decremented too
many times. The bug was introduced in r296715.

Big thanks to Alex Deiter for his help with debugging this.

Reviewed by: kib@
Tested by: Alex Deiter <alex.deiter at gmail.com>
MFC after: 1 month

Details

Provenance
traszAuthored on
Parents
rS311283: Don't release the cfiscsi session refcount too early. It wasn't
Branches
Unknown
Tags
Unknown