>Number:         4734
>Category:       kern
>Synopsis:       kernel can be crashed by NFS access on socket
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    kern-bug-people (Kernel Bug People)
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Dec 20 16:20:02 1997
>Last-Modified:
>Originator:     Matthias Scheler
>Organization:
Matthias Scheler                                http://home.owl.de/~tron/
>Release:        971212
>Environment:
System: NetBSD lyssa 1.3_BETA NetBSD 1.3_BETA (LYSSA) #0: Fri Dec 12 11:35:29 MET 1997 tron@lyssa:/src/src/sys/arch/i386/compile/LYSSA i386

>Description:
On a NFS directory access to an Unix domain socket by an Amiga using
AmiTCP/IP's NFS client the kernel panics with this message:

panic: ffs_read: type 6

A "trace" brings up this information:

...
_ffs_read+0x84
_ufs_readdir+0x97
_nfsrv_readdir+0x767
...

>How-To-Repeat:
Mount a directory containing an Unix domain socket with AmiTCP/IP's
"ch_nfs" client and use "List" on the socket.

>Fix:
Sorry, I don't know.

>Audit-Trail:
>Unformatted: