Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

Silly Kernel Panic in Mac OS X 10.2.2

Posted by pudge on Fri Nov 29, 2002 08:54 AM
from the don't-try-this-at-home dept.
shibby tells us that it is easy to cause a kernel panic in Mac OS X 10.2.2, by attempting to move a directory into the same location as another one of the same name, using Terminal: mkdir ~/mydir; cd ~/mydir; mkdir mydir; mv mydir ... Kernel panic is instant. Save all your documents and quit your open apps if you feel the need to see it for yourself. Happy Thanksgiving!
+ -
story
This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • Wow (Score:3, Funny)

    by darkov (261309) on Friday November 29 2002, @08:59AM (#4779529)
    Apple has a bug. This is amazing news. FP
    • Re:Wow (Score:2, Funny)

      by Anonymous Coward
      Isn't it called a 'worm' there?
      • Re:Why? (Score:4, Informative)

        by stripes (3681) on Friday November 29 2002, @01:45PM (#4780668) Homepage Journal
        Apple would have been better using someone else's kernel -- like the FreeBSD one -- verbatim instead of trying to hack up that Mach POS (which I've heard nothing but bad things about from OS people up at Carnegie Mellon, where Mach was developed).

        Well MACH isn't exactly an OS, it is more of an OS for running OSes, and one of the OSes it can run is the "BSD Single Server" which is a BSD4.3+/4.4ish derieved OS that isn't in my opnion as good as some of the other BSD4.4ish derived OSes (like FreeBSD).

        One of the other OSes that runs under MACH is a modifyed MacOS9. I havn't run OS9 (aka "Classic") on purpose for months, but other people find it rather indepsnsable, and wouldn't use OSX without it.

        As you say they could plop Carbon and Quartz ontop of FreeBSD just as easally as onto MACH's BSD Single Server. However getting OS9 to "run under" FreeBSD would have been a much larger pain.

        Of course, I certainly could be missing something -- could be that the FBSD kernel just didn't do something that Apple had to have it do, and that the FBSD people wouldn't have accepted. Could be SMP issues, I suppose...

        I doubt it is SMP issues. I'm not even sure the FreeBSD people would reject the stuff needed to get OS9-under-FreeBSD working, after all it might not be that different from what WINE needs from the kernel...but it would have taken a whole lot more time then getting OS9 running under MACH more or less along side the BSD Single Server (kind of under it and off to one side I susspect...)

        the device driver model is also different, and in a lot of ways better (and unfortunitly in a lot of ways worse) then FreeBSD.

      • Re:Why? (Score:5, Interesting)

        by Elwood P Dowd (16933) <judgmentalist@gmail.com> on Friday November 29 2002, @02:25PM (#4780851) Journal
        Well, Avie Tevinian [apple.com] probably doesn't agree with your "OS people up at Carnegie Mellon", and he's running the show over at Apple. He also wrote some pertinent versions of Mach, up at Carnegie Mellon.

        When it comes to questions like this, if you can get the best people, using their prefered tools is often a good idea. If Apple could have hired all the architects of the freebsd Kernel, then sure, maybe you'd be right.

        Also, I don't know what the hell you mean that you've "heard nothing but bad things about" Mach. It's a well known and well inspected peice of code. It might have problems, but saying "bad things" doesn't mean anything. What are the problems? Message passing is slow? This is true. Whatever. It's an architectural choice. Some of those architectural choices are exactly what makes Mach good for Apple - Multiple OS hosting.
      • Re:Why? (Score:3, Interesting)

        This looks more like the result of Apple's notably difficult attempt to get Unix to work with HFS+ than any problem with their kernel design.


  • Please tell me that shibbey or pudge...or someone... actually submitted this bug to Apple before posting it here.

    It'll be interesting, though, to see how long we wait for a fix. If this is a legit thing. I haven't tested it and don't plan to.
    • In the spirit of scientific testing, I have just subjected my iBook to this - And sure enough, you get an instant kernel panic.
    • by Draoi (99421) <`draiocht' `at' `mac.com'> on Friday November 29 2002, @10:16AM (#4779794) Journal
      Yep! The guys on MacNN posted feedback to Apple last week. Expect a kernel Software Update sometime soon, I guess.
    • by JMZorko (150414) on Saturday November 30 2002, @03:02AM (#4782936) Homepage
      Awhile ago, before Jaguar, I (inadvertently) found a way to make Mac OS X 10.1.something kernel panic, by writing some absolutely horrid BSD sockets code (the kind you write when you're trying to help a fellow developer but you've not slept in far too long). I submitted it to Apple via the darwin-dev list, and they were very hip on fixing it. A software update including the fix was available I think two weeks later.

      Now, i'm sure they had other things in that update, and it wasn't just on my account, but they thought it important enough to roll it in anyway. I thought that was the coolest thing :-)

      Regards,

      John

      Falling You - exploring the beauty of voice and sound http://www.mp3.com/fallingyou [mp3.com]

  • C|/CON/CON (Score:3, Insightful)

    by isorox (205688) on Friday November 29 2002, @09:11AM (#4779565) Homepage Journal
    This is as dumb as the windows file/run/file://C|/CON/CON doohickey.

    Can this be exploited by a rouge shell script? "Funny_Picture.png.sh" wouldnt be fun, given the average mac user is
    1) As guilable as windows users
    2) Not as savvy to the ways of trick emails as windows users.

    At least it wouldnt propergate - I assume theres a undered different mail clients on OSX. (I'm not a millionaire and cant afford my own mac you insensitive clod!)

    • by sweet reason (16681) <mbloore AT yahoo DOT com> on Friday November 29 2002, @11:13AM (#4779976) Homepage
      Can this be exploited by a rouge shell script?

      i don't think so, but a big blue one could do the job.
    • Don't know about the other two major mail clients (Eudora and Entourage), but Mail wouldn't trick users into double clicking a hypothetical "Funny_Picture.png.sh."

      Shell scripts by default are associated with TextEdit. Double clicking on an attached shell script would open it in the editor. No execution. No harm.

      As long as the other two mail apps follow the system's file association, all's well.
        • by Melantha_Bacchae (232402) on Friday November 29 2002, @10:43AM (#4779878)
          Funny you mention video editing. Even on the low end, your $1,200 PC is never going to run iMovie.

          On the high end, your cost comparison is a joke, because the cost of the computer is the least of your expenses. A high end PC based (with Avid or the like) system is going to set you back $100,000 or more.

          The cost for a similarly featured Apple video editing system with Final Cut Pro? Less than $10,000.

          Read it and weep:
          http://www.filmandvideo.com/New%20Pages/art icle2.h tml

          Worried about this kernel panic ruining your video editing? Don't. You are not likely to be in your Terminal making two directories of the same name and moving them about in the course of your video editing. Even if you were, this is happening in the Unix part of OS X, which is open source, and it is being announced on Slashdot. Someone will probably fix it for fun over the weekend and email Apple a patch by Monday. We'll probably see an official, tested, security update from Apple next week. That is the beauty of open source.

          If this were Microsoft and a "blue screen of death", well, don't hold your breath. Their response would be the same as seven years ago: "There are no significant bugs in Windows XP. Trust us.". Yeah, right! That's what PC Magazine said about Windows 95, when I spent 11 months trying to get a stable install of the original version.

          Windows: "Go talk to my friend, an 800 pound monopoly-abusing gorilla!"
          Mac: "And here's my good buddy, the 66,000 ton Godzilla!"
          Godzilla: Stomp! ;)
            • by MoneyT (548795) on Friday November 29 2002, @10:26PM (#4782303) Journal
              A troll feeding we will go, a troll feeding we will go, hi ho the derio (WTF is that anyways?) a troll feeding we will go.

              What's also amusing is, children have no problem using dos, linux, windows, MacOS or OSX. They have no preference to OS as long as it can play sound, let them personalise their desktop etc. what they favour is SOFTWARE

              Yet for some unknown reason, if you put an average highschool computer user who's grown up on a windows PC all his life in front of a mac, and open up netscape, they can't seem to figure out how to make it work, despite it having an identical interface to the PC version. The reason I was given was becasue "It's a mac, I don't know how to use a mac"
  • by WesG (589258) on Friday November 29 2002, @09:24AM (#4779602)
    Not only does it cause a kernal panic, but it slaps the user on the head and asks them, "Why the heck did you create a directory with the same name as the current directory????"

    Those crazy kernal programmers :-)

    • It could be several bugs, but it isn't clear. Does the same thing happen if you aren't moving the directory to itself as in the example? mkdir x y mv x y

      Should leave you with subdir y containing subdir x, but 'mv x x' is an error. If the code for mv actually tries to treat 'mv x x' like 'mv x y' (x and y are directories), then it will be badly breaking the rules for using link(2) and unlink(2).

      Although it isn't a particularly deep bug, the fact that it panics makes it pretty nasty. What I would be curious about it how/where it was introduced. None of the code involved should be special to Apple in any way, so what happens on BSD (probably gives you an error, right?). Linux gives: "mv: cannot move `x' to a subdirectory of itself, `x/x'", and I'd be very surprised that BSD doesn't do the same, so how did it get broken.

      • Still, in Linux it just gives you an error message, or does what you would expect. I'm still curious about the origins of this bug, and where it is. I would look at the 'mv' command code first.
      • None of the code involved should be special to Apple in any way

        Mac OSX by default uses HFS+ rather then FFS, so there is a lot of Apple-specific code getting executed in there. Maybe they don't do namei cache invalidation correctly in their HFS+ file system code (for example).

        Not a huge unforgivable bug to have, but one hopes they will try to fix it quickly. It would definitly re-enforces my opnion of OSX as very stable for a desktop OS, but not very stable as a server OS. Which is why I own an Apple laptop, but not an Apple rackmount computer ;-)

        However if they don't fix this kind of bug fast they are less likely to sell Xserve systems...

        ...not that Sun didn't have a bug where if you ftruncate'd /dev/audio you got a panic for something like five years! Sure that is a little less serious because you could deny users access to /dev/audio on a share machine and not suffer, but still... and I think it worked on any streams object that lived int he file system, so....

        ...but it would be nice if Apple proved themselves to be better then that.

  • Ooops (Score:5, Funny)

    by iMMersE (226214) on Friday November 29 2002, @09:32AM (#4779625) Homepage
    Found the offending piece of code in Darwin ...

    BOOL HFSPLUS_Directory_Move( const char *src, const char *dest ) {
    if ( !strcmp( src, dest ) ) {
    __kernelPanic( KP_IMMEDIATE );
    } ...
    }
    • Re:Ooops (Score:4, Informative)

      by Gerry Gleason (609985) <gerryNO@SPAMgeraldgleason.com> on Friday November 29 2002, @10:01AM (#4779740)
      Except that string comparisons aren't particularly useful in deciding that two directory arguments are the same. You have to stat them and compare inodes and devs.

      Yes, I know this is trying to be funny, but on /. accuracy counts in humor as well.

        • I'll admit to a little initial confusion about the example case, but still, string compare of the args doesn't get you anything. For 'mv' the usage case is moving a directory to an existing directory, which is a reduced case of 'mv [...] ' (moving a list of files and/or dirs to a dir). If the source is a file, you replace a file of the same name, but if there is a directory in the target dir matching the source name (just the basename part), then it should be an error whether the source is a file or directory.

          Now, the issue WRT this now too long thread about a bad joke, is that the test is for existence of a dir in the target dir, not string comparison, or inodes (that's another case that may or may not work correctly).

  • First there was General Controls, who was sometimes drunk and forgot all my preferences.
    Then there was Colonel Panic, who wouldn't work if you added two folders with the same name to the same in box on his desk.
    What's next? Private Keychain will forget where he stored my passwords and x.509 certificates?
    Oh wait... you were talking about kernels...
    Sorry!
    -wjc.

  • IMPORTANT! (Score:5, Informative)

    by iMMersE (226214) on Friday November 29 2002, @09:56AM (#4779726) Homepage
    Be very careful with this - If you are testing, or accidentally gonna do this, you will lose both directories and all data in them.
  • by ewwhite (533880) on Friday November 29 2002, @09:58AM (#4779733) Homepage
    I was able to create a directory and move a directory of the same name into it. Bash is my default shell. Try the same thing in Bash. exx@eddy:~/mydir/mydir$
  • They know .... (Score:5, Informative)

    by Draoi (99421) <`draiocht' `at' `mac.com'> on Friday November 29 2002, @10:13AM (#4779786) Journal
    This was originally posted to the darwin-development mailing list, of which I'm a subscriber;

    Here's the message [apple.com] (login: archives, pass: archives)

    This list is teeming with Apple folks, so I'm sure someone's posted a RADAR bug already.

    This problem also came up on MacNN and is discussed in detail here [macnn.com]

    Now here's the kicker - as the kernel is open-source (APSL - don't complain), someone's already traced the problem back to a recursive lock in the HFS+ subsystem (hfs_vnops.c). Kewl or wha'?

    • Kind of OT, but what the hell.

      When is Apple finally going to overhaul HFS+? It's a decent filesystem, but it has quite a few drawbacks and limitations, including this "issue", if what you say is true.

      Microsoft finally did right and made NTFS the standard. BeOS has BFS, and Linux... well, there's about 10 good filesystems for Linux.

      HFS+ has been around since the early days of multigigabyte hard disks. In computer time, that's an eturnity. Come on Apple, the time has come for HFS++.
      • Re:They know .... (Score:4, Informative)

        by Space Coyote (413320) on Friday November 29 2002, @01:41PM (#4780644) Homepage
        Apparently one of the reasons Apple has delayed the release of their XServe RAID product is so that they can completely re-write HFS to include journalling and other such niceties. I don't care just as long as they don't take away the stuff that we all love about Mac file systems.
      • by 2nd Post! (213333) <gundbear.pacbell@net> on Friday November 29 2002, @02:59PM (#4781003) Homepage
        What's missing that you want HFS+ to go away or something?

        It's got metadata, which Microsoft only *added* with NTFS
        It finally got journaling with 10.2.2
        It spans, quite comfortably, 180GB hard drives
        File sizes can be larger than 2gb, and I believe up to 2TB (2^63 bytes per file)

        Is there something missing? Perhaps encryption? Apple already has support for encrypted volumes...
              • POSIX isn't inherently good. Actually, I hate apps which use POSIX file paths as file primitives. If you change the path the application loses track of the file. How retarded is that?
      • Well, most regular (Mac-) users dont't attempt "to move a directory into the same location as another one of the same name, using Terminal".
      • Re:They know .... (Score:4, Insightful)

        by Daniel Dvorkin (106857) on Friday November 29 2002, @10:33PM (#4782318) Homepage Journal
        It's found. If it's not fixed, it soon will be. And since Apple is very good about patch releases through Software Update, the fix will soon be easily available to every OS X user.

        This kind of partnership between OSS and a major commercial vendor is unprecedented, AFAIK. (No flames, please; if I'm wrong, just tell me so, and who did it first.) It's produced some great things so far, and I'm looking forward to seeing where it goes.
      • Re:They know .... (Score:5, Interesting)

        by valmont (3573) on Saturday November 30 2002, @07:56PM (#4785721) Homepage Journal
        you are missing the point here. It works this way:

        1. user accidentally finds bug in OS
        2. user talks about it on open-source forums and other places on the internet
        3. Apple gets notified as well as open-source community at large
        4. within minutes of its discovery, some geeks manage to find the root of the problem
        5. apple developers are notified of geeks' findings, confirm, fix, and thoroughly test the fix.
        6. within days apple users get a software update notification if bug is important, or fix is rolled into the next major sub-dot release if fairly inconsequential for the broader user base, as it might be the case for this one
        You see, apple users don't need to do shit. All i know is that some bug that is fairly inconsequential to me was found, and that it's guna get fixed, fast, and my next OS X release will be all the stronger, and all i'll have to do is click the "install" button when prompted, and i will feel warm and fuzzy all over. I don't even need to what a fucking kernel is.

        now that's just me. Yes, many geeks out there will gladly hunt-down the bug in the source code and recompile their kernel.

        The point is, you know problems are addressed in an appropriate matter.

        So yes, open-source, is, indeed, so much better than anything else, especially if you're dealing with what i consider in my little world, the mission-critical piece of software that is my tibook's operating system.

        Such process shows me that a product that relies heavily on mature open-source components is less likely to cause productivity-killing crashes and loss of data such as the ones i've experienced with my previous dell laptop running win2k, as described in one of my journal entries [slashdot.org].

        And if was to direct an IT department, gee, i just may consider putting a flat-panel iMac on every employee's desktop. Shit i could mount user directories from a central location, enabling employees to switch work stations, i would uniformely configure all machines, prevent users from writing files or installing applications outside of their home directories, i could ssh in each box for sporadic debug work, i could create automated processes to create development environments based on users' needs, wether they're graphic artists or J2EE application developers.

        OS X owns you.

        this is it people. we are well on our way to reach the nirvana of computing, with symbiotic collaboration between a major hardware and software vendor and the open source community at large, market share gains in each camp benefits the other.

  • ArsTechnica (Score:5, Informative)

    by Draoi (99421) <`draiocht' `at' `mac.com'> on Friday November 29 2002, @10:23AM (#4779813) Journal
    .. have a thread going on this, too. Link here [infopop.net]
  • by Anonymous Coward on Friday November 29 2002, @11:25AM (#4780026)
    Isn't "mydir" a Microsoft innovation? Could explain why it crashes ;p
  • by drive (621617) on Friday November 29 2002, @12:03PM (#4780167)
    perhaps off topic, but it will also cause kernel panic (at least in my network without fail).

    try to mount a share from an local smb server that does not exist. cancel it, then try to mount one that DOES exist.

    ie. from the finder command-k
    smb://10.0.1.3 #does not exist
    cancel it,

    smb://10.0.1.4 #does exist

    the second attempt will time out and the machine will have to be hard reset.

    maybe this is just me, but this has been happening to me since 10.1.5
  • by bluestar (17362) on Friday November 29 2002, @12:16PM (#4780207) Homepage
    Sure enough using /bin/mv it crashed as advertised.

    But /sw/bin/mv, which is the GNU version of mv from the fileutils package, just gives a "cannot overwrite directory" error.

    This is (one of the many reasons) why the GNU versions of everything should be standard on all systems in the universe. So go fetch and install a copy of fink and (optionally) FinkCommander.

    Also, "alias mv mv -i" is a Very Good Idea(tm).
  • Cool. (Score:5, Funny)

    by red5 (51324) <gired5.gmail@com> on Friday November 29 2002, @01:12PM (#4780512) Homepage Journal
    You should see the death screen. Very slick. I'd post a screen grab, but well you know. :)
    • Re:Cool. (Score:4, Interesting)

      by Have Blue (616) on Sunday December 01 2002, @12:01AM (#4786406) Homepage
      What's even slicker is that the diagnostic output that used to go all over the screen was instead written to NVRAM, and moved out to disk (~/Library/Logs IIRC) when you rebooted.
  • Don't you get it? (Score:3, Interesting)

    by WebBug (178944) on Friday November 29 2002, @06:18PM (#4781680) Homepage Journal
    I must admit to being somewhat taken aback by the comments here . . .

    While this bug appears trivial it is not.

    Consider: An entire apple server can be totally killed requiring a human to reboot it just by getting a totally unpriveleged shell access.

    EVEN A GUEST can kill the system using this simple simple set of commands. That's not good. Of course it's not the end of the world either.

    anyone know of a way to get unprivileged access on an apple server of your choice?!
  • Another easy one (Score:3, Interesting)

    by Wesley Felter (138342) <wesley@felter.org> on Friday November 29 2002, @06:49PM (#4781752) Homepage
    Try changing an Ethernet interface's MAC address using ifconfig. Whoops.
  • by Tokerat (150341) on Monday December 02 2002, @04:49AM (#4791965) Journal

    I just tested this over an FTP connection to a Mac OS X 10.2.2 box using Transmit (a Mac FTP client) from a MacOS 9 machine.

    I was ABLE to panic the kernel remotely.

    This has just taken a violent swing into serious, as ANY USER WITH FTP ACCESS can now drop your Mac OS X machine. Apple needs to patch this, and quickly. I don't care if the security update is 15k to replace /bin/mv, anyone who has an FTP cannot live like this.

    Any idea what eactly could be wrong with either the kernel or mv that would cause such a problem? Branching to the wrong case (i.e. branching to the "same name" case as opposed to the "can't replace a directory with an item it contains" case)?

    Is this a job for the Darwin team since it involves a BSD component?
    • Re:Sure (Score:5, Insightful)

      by qengho (54305) on Friday November 29 2002, @10:00AM (#4779738)

      Try explaining to mom why she can't have two directories named letters without crashing the machine

      The GUI (gracefully) prevents you from doing this, so if Mom can understand the sequence of terminal commands that triggers the panic, she'll have no trouble understanding why...

    • by Melantha_Bacchae (232402) on Friday November 29 2002, @11:17AM (#4779999)
      krel wrote:

      > os9 would never, despite its shabby memory
      > protection, and pathetic preemptive multitasking,
      > do that.

      Nope, because OS 9 wasn't Unix, and so didn't use Unix terminology for operating system failures. OS 9 bombed, OS X panics (very rarely). BTW, any kernel hacker can, if they choose, get the source code and fix this bug. OS 9 couldn't do that either.

      I'm glad, though, that I switched early enought that I got a chance to know OS 9. It really was amazing, despite it being basically a microcomputer OS, all the things Apple got it to do.

      OS 9 is the blue-eyed caterpillar, small and awkward, but courageous and friendly.

      OS X is the blue-eyed adult Moth, awesomely beautiful, supremely powerful. She soars above all, the peerless Queen of Monsters.

      And Apple is, as always, Mothra Leo's Forever Friend. ;)
      • More like non-existant

        I believe that classic MacOS could do preemptive threading of some sort, but only with 680x0 code, not PPC.

        I got interested in writing threaded stuff under the MacOS at one point, so this is out of hazy memory here.