1#!/bin/sh 2 3# 4# Copyright (c) 2011 Peter Holm 5# All rights reserved. 6# 7# Redistribution and use in source and binary forms, with or without 8# modification, are permitted provided that the following conditions 9# are met: 10# 1. Redistributions of source code must retain the above copyright 11# notice, this list of conditions and the following disclaimer. 12# 2. Redistributions in binary form must reproduce the above copyright 13# notice, this list of conditions and the following disclaimer in the 14# documentation and/or other materials provided with the distribution. 15# 16# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 17# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 18# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 19# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 20# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 21# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 22# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 23# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 24# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 25# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 26# SUCH DAMAGE. 27# 28 29# "panic: vn_lock 0xc65b5828: zero hold count" seen. 30 31# Originally found by the iknowthis test suite 32# by Tavis Ormandy <taviso cmpxchg8b com> 33# Fixed by r227952 34 35[ `id -u ` -ne 0 ] && echo "Must be root!" && exit 1 36 37. ../default.cfg 38 39odir=`pwd` 40cd /tmp 41sed '1,/^EOF/d' < $odir/$0 > devfd.c 42rm -f /tmp/devfd 43mycc -o devfd -Wall -Wextra -O2 -g devfd.c -lpthread || exit 1 44rm -f devfd.c 45 46mount | grep $mntpoint | grep -q /dev/md && umount -f $mntpoint 47mdconfig -l | grep -q md$mdstart && mdconfig -d -u $mdstart 48 49mdconfig -a -t swap -s 1g -u $mdstart || exit 1 50newfs $newfs_flags md$mdstart > /dev/null 51mount /dev/md$mdstart $mntpoint 52chmod 777 $mntpoint 53 54su $testuser -c "(cd $mntpoint; /tmp/devfd)" 55 56while mount | grep $mntpoint | grep -q /dev/md; do 57 umount $mntpoint || sleep 1 58done 59mdconfig -d -u $mdstart 60rm -f /tmp/devfd 61exit 62EOF 63#include <err.h> 64#include <fcntl.h> 65#include <pthread.h> 66#include <stdio.h> 67#include <stdlib.h> 68#include <sys/param.h> 69#include <sys/stat.h> 70#include <sys/types.h> 71#include <unistd.h> 72 73int fd[3], fd2[3]; 74 75void * 76thr1(void *arg __unused) 77{ 78 int i, j; 79 char path[80]; 80 81 for (i = 0; i < 100000; i++) { 82 for (j = 0; j < 3; j++) { 83 if (fd[j] != -1) 84 close(fd[j]); 85 sprintf(path, "fx%d", j); 86 fd[j] = open(path, O_RDWR | O_CREAT, 0640); 87 } 88 } 89 return (0); 90} 91 92void * 93thr2(void *arg __unused) 94{ 95 int i, j; 96 char path[80]; 97 98 for (i = 0; i < 100000; i++) { 99 for (j = 0; j < 3; j++) { 100 if (fd2[j] != -1) 101 close(fd2[j]); 102 sprintf(path, "/dev/fd/%d", j); 103 if ((fd2[j] = open(path, O_RDONLY)) != -1) 104 fchflags(fd2[j], UF_NODUMP); 105 } 106 107 } 108 return (0); 109} 110 111int 112main(void) 113{ 114 pthread_t p1, p2; 115 int r; 116 117 close(0); 118 close(1); 119 close(2); 120 if ((r = pthread_create(&p1, NULL, thr1, NULL)) != 0) 121 errc(1, r, "pthread_create"); 122 if ((r = pthread_create(&p2, NULL, thr2, NULL)) != 0) 123 errc(1, r, "pthread_create"); 124 pthread_join(p1, NULL); 125 pthread_join(p2, NULL); 126 127 return (0); 128} 129 130