Re: FFS: wrong superblock check ~> crash

[Taylor R Campbell <campbell+netbsd-tech-kern%mumble.net@localhost>]

   Date: Mon, 20 Oct 2014 17:46:06 +0200
   From: Manuel Bouyer <bouyer%antioche.eu.org@localhost>

   Sure. There's lot of other ways to crash the kernel with a broken ffs.
   In this specific case it's OK to return an error, but in the general
   case I prefer to have the kernel panic when an inconsistency is
   detected in ffs, than return an error and try to continue running with
   a bogus filesystem.

Continuing to run with a bogus file system is no good, but panicking
the kernel is worse.  If the kernel takes any drastic action beyond
merely returning an error, it should remount the file system
read-only.