Re: Hurd Security vulnerabilities, please upgrade!

[Samuel Thibault]

Richard Braun, le mar. 10 août 2021 13:53:28 +0200, a ecrit:
> On Tue, Aug 10, 2021 at 02:26:54PM +0300, Sergey Bugaev wrote:
> > On Tue, Aug 10, 2021 at 5:04 AM Samuel Thibault <sthibault@debian.org> 
> > wrote:
> > > In the past months, Sergey Bugaev has been working on fixing some
> > > Hurd security vulnerabilities.
> > 
> > I urge everybody to upgrade (and reboot!) their systems as soon as
> > possible. I have already updated mine, and can confirm that all my
> > exploits fail now.
> 
> I have issues mounting /home (or rather, keeping it mounted) on
> darnassus.sceen.net since the reboot.

It indeed crashes as soon as looking at the root content:

/hurd/ext2fs: ../../ext2fs/pager.c:1345: diskfs_get_filemap: Assertion 
'(((right) != ((mach_port_t) 0)) && ((right) != ((mach_port_t) ~0)))' failed.
/lib/i386-gnu/libdiskfs.so.0.3(_diskfs_rdwr_internal+0x78)[0x106b468]
/lib/i386-gnu/libdiskfs.so.0.3(diskfs_node_rdwr+0x86)[0x106a2d6]
/hurd/ext2fs(diskfs_get_directs+0xe5)[0x804d615]
/lib/i386-gnu/libdiskfs.so.0.3(diskfs_S_dir_readdir+0x73)[0x1053f03]

I was indeed wondering a bit about that removal of the while loop, but
couldn't see how it could happen.
I don't see either how that filesystem is special and triggers something
in particular, its root just contains directories.

Samuel