The UFS implementation in the kernel in Sun OpenSolaris snv_29 through snv_90 allows local users to cause a denial of service (panic) via the single posix_fallocate test in the SUSv3 POSIX test suite, related to an F_ALLOCSP fcntl call.
http://www.securitytracker.com/id?1021600
http://www.securityfocus.com/bid/33267
http://sunsolve.sun.com/search/document.do?assetkey=1-26-239188-1