Kernel panic in 2.2.2 and 2.2.1...

Tomasz Przygoda (tprzyg@securities.com)
Sun, 28 Feb 1999 02:24:13 -0500


I can trigger kernel panic from:

/usr/src/linux/net/unix/garbage.c:
[...]
extern inline void push_stack(unix_socket *x)
{
if (in_stack == max_stack)
panic("can't push onto full stack");
stack[in_stack++] = x;
}
[...]

I can fill the stack by sysloging everything with level info, and
opening a lot of connections to that box (e.g.. ssh).

I consider it to be a "DoS" window, and even though some people would
not suffer from this, I think it's still worth fixing - esp. since Linux
is getting more recognition from commercial vendors like Dell or H-P.

Thanks!

-- Tomek,
"A sufficiently primitive malloc(3) is indistinguishable from memory leak."
---------------------------------------------------------------------------
Internet Securities, Inc. phone (617) 204-3100
695 Atlantic Ave. Suite 400, Boston MA 02111 fax. (617) 204-3101

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/