Hi Michael,

Just a quick note to let you know that we were able to duplicate this.
The root cause is an interaction between Linux 6.5 CONFIG_FORTIFY_SOURCE=y 
string helpers and
a recent change in OpenAFS 1.8.10 to use strlcpy, which is now fortified in 
your kernel.
 
OpenAFS has always managed the name string for directory entries in a very 
quirky but
ultimately memory-safe way.  However, due to the new interaction described 
above,
Fortify now sees any directory entry name longer that 16 chars as a buffer 
overrun.
In your case, this is triggered during cache manager initialization by the 
first cell
in CellServDB with a cell name longer than 16 characters.

I have fixed the specific kernel BUG you reported, and was able to bring up a
working cell.  However, there are several additional paths where similar issues 
in "long"
directory entry names are still present.  Therefore, I'm still working on 
finding and fixing those.
I'll let you know when I think I've fixed them all and have something in gerrit 
for you to try.

Regards,
--
Mark Vitale
OpenAFS Release Team


> On Sep 14, 2023, at 4:19 PM, Michael Laß <l...@mail.upb.de> wrote:
> 
> Hi Mark,
> 
> Am Donnerstag, dem 14.09.2023 um 16:06 -0400 schrieb MS Vitale:
>> 
>> I didn't look closely, but I doubt you are missing anything.
>> Instead, this might be an edge case provoked by site-specific
>> contents of dynroot.
>> Could you please supply a list of all your cell names from CellServDB
>> and any aliases from CellAlias?
> 
> My CellServDB is the one currently shipped in src/afsd [1], extended by
> the following entry:
> 
>> fritz.box              #Test cell
> 192.168.178.230         #afs.fritz.box
> 
> But since two other users reported the issue today, I don't think it's
> related to that additional entry.
> 
> I don't have any CellAlias file set up.
> 
> Best regards,
> Michael
> 
> [1] 
> https://github.com/openafs/openafs/blob/538f450033a67e251b473ff92238b3124b85fc72/src/afsd/CellServDB

_______________________________________________
OpenAFS-devel mailing list
OpenAFS-devel@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-devel

Reply via email to