Date: Wed, 23 Mar 2005 08:28:03 +0000 (UTC) From: David Schultz <das@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/i386/i386 sys_machdep.c Message-ID: <200503230828.j2N8S3je021971@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
das 2005-03-23 08:28:03 UTC
FreeBSD src repository
Modified files:
sys/i386/i386 sys_machdep.c
Log:
Bounds check the length parameter to i386_set_ldt() before passing it
to kmem_alloc(). Failure to do this made it possible for user
processes to cause a hard lock on i386 kernels. I believe this only
affects 6-CURRENT on or after 2005-01-26.
Found by: Coverity Prevent analysis tool
Security: Local DOS
Revision Changes Path
1.96 +2 -0 src/sys/i386/i386/sys_machdep.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200503230828.j2N8S3je021971>