Dynamic pseudo root development?

[Steve Dickson]

Ray Van Dolson wrote:

> I started with:
> 
>   1. /etc/init.d/nfs start
>   2. kill <pid of rpc.mountd>
> 
> The crash occurred on remote system (running RHEL 4.6) did a cd /net/leoray --
> so the automounter was used to initiate whatever request did this.
> 
> showmount -e from that same host prior to the cd /net/leoray worked
> fine.
> 
> Let me know if there's anything else you'd like me to try.
> 
> Contents of /etc/exports:
> 
> /leoray1    *(rw,insecure,async,no_subtree_check)
> /software   *(rw,insecure,async,no_root_squash,no_subtree_check)
> /files      *(ro,insecure,async,no_root_squash,no_subtree_check)
> 
> # rpc.mountd -F -d all
> mountd: MNT3(/files) called
> mountd: authenticated mount request from (null):621 for /files (/files)
> mountd: nfsd_fh: '* 7 \x0100730200000000e307f2a9999f40efb54d2453f6fc3b93'
> mountd: nfsd_fh: found /files
> mountd: MNT3(/leoray1) called
> mountd: authenticated mount request from (null):622 for /leoray1 (/leoray1)
> *** glibc detected *** rpc.mountd: double free or corruption (!prev): 0xb9910658 ***
> ======= Backtrace: =========
> /lib/libc.so.6[0x1a9ac1]
> /lib/libc.so.6(cfree+0x90)[0x1ad0f0]
> rpc.mountd[0xb7fbabbb]
> rpc.mountd[0xb7fb8fb7]
> rpc.mountd[0xb7fb944f]
> rpc.mountd[0xb7fc4d72]
> rpc.mountd(mount_dispatch+0xac)[0xb7fba7cc]
> /lib/libc.so.6(svc_getreq_common+0x292)[0x23b642]
> /lib/libc.so.6(svc_getreqset+0x51)[0x23af31]
> rpc.mountd[0xb7fbdc0d]
> rpc.mountd(main+0x794)[0xb7fba344]
> /lib/libc.so.6(__libc_start_main+0xe0)[0x156390]
> rpc.mountd[0xb7fb8c11]
Hmm... installing the nfs-utils-debuginfo package would give this
more meaning but let be see if I can reproduce this locally...

steved.