From owner-cvs-all@FreeBSD.ORG  Sat Oct 14 19:02:02 2006
Return-Path: <owner-cvs-all@FreeBSD.ORG>
X-Original-To: cvs-all@FreeBSD.org
Delivered-To: cvs-all@FreeBSD.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 0B03616A416;
	Sat, 14 Oct 2006 19:02:02 +0000 (UTC) (envelope-from ru@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 1B4B043D9C;
	Sat, 14 Oct 2006 19:01:57 +0000 (GMT) (envelope-from ru@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.13.6/8.13.6) with ESMTP id k9EJ1ukp078523;
	Sat, 14 Oct 2006 19:01:56 GMT (envelope-from ru@repoman.freebsd.org)
Received: (from ru@localhost)
	by repoman.freebsd.org (8.13.6/8.13.4/Submit) id k9EJ1u2b078503;
	Sat, 14 Oct 2006 19:01:56 GMT (envelope-from ru)
Message-Id: <200610141901.k9EJ1u2b078503@repoman.freebsd.org>
From: Ruslan Ermilov <ru@FreeBSD.org>
Date: Sat, 14 Oct 2006 19:01:56 +0000 (UTC)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Cc: 
Subject: cvs commit: src/sys/kern sys_generic.c
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 14 Oct 2006 19:02:02 -0000

ru          2006-10-14 19:01:56 UTC

  FreeBSD src repository

  Modified files:
    sys/kern             sys_generic.c 
  Log:
  Prevent IOC_IN with zero size argument (this is only supported
  if backward copatibility options are present) from attempting
  to free memory that wasn't allocated.  This is an old bug, and
  previously it would attempt to free a null pointer.  I noticed
  this bug when working on the previous revision, but forgot to
  fix it.
  
  Security:       local DoS
  Reported by:    Peter Holm
  MFC after:      3 days
  
  Revision  Changes    Path
  1.151     +2 -1      src/sys/kern/sys_generic.c