kern/45151: fs corruption in ufs_rmdir

[dholland%netbsd.org@localhost]

>Number:         45151
>Category:       kern
>Synopsis:       fs corruption in ufs_rmdir
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Jul 16 07:50:00 +0000 2011
>Originator:     David A. Holland
>Release:        5.99.55 (20110711)
>Organization:
>Environment:
n/a
>Description:

If the truncate call at the end of ufs_rmdir fails, it generates an
error; however, it drops the unlinked but non-truncated directory on
the floor.

This will probably result in fsck failure later, since the inode won't
be reclaimed and marked free, and the contents found won't match the
link count.

>How-To-Repeat:

code reading.

>Fix:

probably painful.