1#!/bin/sh 2 3# 4# Copyright (c) 2011 Peter Holm 5# All rights reserved. 6# 7# Redistribution and use in source and binary forms, with or without 8# modification, are permitted provided that the following conditions 9# are met: 10# 1. Redistributions of source code must retain the above copyright 11# notice, this list of conditions and the following disclaimer. 12# 2. Redistributions in binary form must reproduce the above copyright 13# notice, this list of conditions and the following disclaimer in the 14# documentation and/or other materials provided with the distribution. 15# 16# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 17# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 18# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 19# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 20# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 21# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 22# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 23# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 24# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 25# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 26# SUCH DAMAGE. 27# 28 29# "panic: vn_lock 0xc65b5828: zero hold count" seen. 30 31# Originally found by the iknowthis test suite 32# by Tavis Ormandy <taviso cmpxchg8b com> 33# Fixed by r227952 34 35[ `id -u ` -ne 0 ] && echo "Must be root!" && exit 1 36 37. ../default.cfg 38 39odir=`pwd` 40cd /tmp 41sed '1,/^EOF/d' < $odir/$0 > devfd.c 42rm -f /tmp/devfd 43mycc -o devfd -Wall -Wextra -O2 -g devfd.c -lpthread || exit 1 44rm -f devfd.c 45 46mount | grep $mntpoint | grep -q /dev/md && umount -f $mntpoint 47mdconfig -l | grep -q md$mdstart && mdconfig -d -u $mdstart 48 49mdconfig -a -t swap -s 1g -u $mdstart || exit 1 50bsdlabel -w md$mdstart auto 51newfs $newfs_flags md${mdstart}$part > /dev/null 52mount /dev/md${mdstart}$part $mntpoint 53chmod 777 $mntpoint 54 55su $testuser -c "(cd $mntpoint; /tmp/devfd)" 56 57while mount | grep $mntpoint | grep -q /dev/md; do 58 umount $mntpoint || sleep 1 59done 60mdconfig -d -u $mdstart 61rm -f /tmp/devfd 62exit 63EOF 64#include <err.h> 65#include <fcntl.h> 66#include <pthread.h> 67#include <stdio.h> 68#include <stdlib.h> 69#include <sys/param.h> 70#include <sys/stat.h> 71#include <sys/types.h> 72#include <unistd.h> 73 74int fd[3], fd2[3]; 75 76void * 77thr1(void *arg __unused) 78{ 79 int i, j; 80 char path[80]; 81 82 for (i = 0; i < 100000; i++) { 83 for (j = 0; j < 3; j++) { 84 if (fd[j] != -1) 85 close(fd[j]); 86 sprintf(path, "fx%d", j); 87 fd[j] = open(path, O_RDWR | O_CREAT, 0640); 88 } 89 } 90 return (0); 91} 92 93void * 94thr2(void *arg __unused) 95{ 96 int i, j; 97 char path[80]; 98 99 for (i = 0; i < 100000; i++) { 100 for (j = 0; j < 3; j++) { 101 if (fd2[j] != -1) 102 close(fd2[j]); 103 sprintf(path, "/dev/fd/%d", j); 104 if ((fd2[j] = open(path, O_RDONLY)) != -1) 105 fchflags(fd2[j], UF_NODUMP); 106 } 107 108 } 109 return (0); 110} 111 112int 113main(void) 114{ 115 pthread_t p1, p2; 116 int r; 117 118 close(0); 119 close(1); 120 close(2); 121 if ((r = pthread_create(&p1, NULL, thr1, NULL)) != 0) 122 errc(1, r, "pthread_create"); 123 if ((r = pthread_create(&p2, NULL, thr2, NULL)) != 0) 124 errc(1, r, "pthread_create"); 125 pthread_join(p1, NULL); 126 pthread_join(p2, NULL); 127 128 return (0); 129} 130 131