Subject: bin/22592: RQUOTA V2 request causes rpc.rquotad to segfault
To: None <gnats-bugs@gnats.netbsd.org>
From: Mark Davies <mark@mcs.vuw.ac.nz>
List: netbsd-bugs
Date: 08/25/2003 14:53:49
>Number:         22592
>Category:       bin
>Synopsis:       RQUOTA V2 request causes rpc.rquotad to segfault
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Aug 25 02:54:00 UTC 2003
>Closed-Date:
>Last-Modified:
>Originator:     Mark Davies
>Release:        NetBSD 1.6W
>Organization:
Dept. of Comp. Sci., Victoria Uni. of Wellington, New Zealand.
>Environment:
	
	
System: NetBSD turakirae.mcs.vuw.ac.nz 1.6W NetBSD 1.6W (MCS_WORKSTATION) #1: Wed Aug 20 17:33:27 NZST 2003 mark@dellc64h2.mcs.vuw.ac.nz:/mnt/SAVE/build.obj/mnt/src/src/sys/arch/i386/compile/MCS_WORKSTATION i386
Architecture: i386
Machine: i386
>Description:
	A V2 RPC GETQUOTA request (generated by the current version of the
	quota command) causes rpc.rquotad, on the NFS server, to segfault
	whereas a V1 GETQUOTA (using a pre Feb version of quota) works.
	Relevant chunk of ktrace output is:

 20626 rpc.rquotad CALL  recvfrom(0,0x804f000,0x2260,0,0xbfbff59c,0xbfbff598)
 20626 rpc.rquotad GIO   fd 0 read 140 bytes
       "@N8\M^A\0\0\0\0\0\0\0\^B\0\^A\M^F\M-+\0\0\0\^B\0\0\0\^A\0\0\0\^A\0\0\0H?Iq(\
        \0\0\0\^Yone-red-dog.mcs.vuw.ac.nz\0\0\0\0\0\0\0\0\0\0\^X\0\0\0\^F\0\0\0\^X\
        \0\0\0\0\0\0\0\^B\0\0\0\^C\0\0\0\^D\0\0\0\^E\0\0\0\0\0\0\0\0\0\0\0\r/am/lid\
        o/home\0\0\0\0\0\0\0\0\0\^C\M-j"
 20626 rpc.rquotad RET   recvfrom 140/0x8c
 20626 rpc.rquotad PSIG  SIGSEGV SIG_DFL
 20626 rpc.rquotad NAMI  "rpc.rquotad.core"

	
>How-To-Repeat:
	NFS Server running -current exporting a filesystem with user quotas
	enabled.
	NFS Client machine running -current performs a "quota username"
	Note the approx 1 minute it takes to respond and see that rpc.rquotad
	 has segfaulted on the server.
	Try a pre revision 1.25 of quota.c version of quota on the NFS Client
	 machine and note that it works correctly.
	
>Fix:
	Don't know, presumably one or other end is not packing/unpacking the
	V2 arguments properly but I couldn't spot it on (brief) inspection.
	

cheers
mark
>Release-Note:
>Audit-Trail:
>Unformatted: