From owner-cvs-all  Mon Sep 10  4:36:15 2001
Delivered-To: cvs-all@freebsd.org
Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP
	id 10D9137B401; Mon, 10 Sep 2001 04:36:09 -0700 (PDT)
Received: (from dd@localhost)
	by freefall.freebsd.org (8.11.4/8.11.4) id f8ABa8r02333;
	Mon, 10 Sep 2001 04:36:08 -0700 (PDT)
	(envelope-from dd)
Message-Id: <200109101136.f8ABa8r02333@freefall.freebsd.org>
From: Dima Dorfman <dd@FreeBSD.org>
Date: Mon, 10 Sep 2001 04:36:08 -0700 (PDT)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/sys/kern sysv_sem.c
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

dd          2001/09/10 04:36:08 PDT

  Modified files:
    sys/kern             sysv_sem.c 
  Log:
  Make the `nsops' variable in `semop' unsigned.  This prevents an
  overflow if uap->nsops (which is already unsigned) is over INT_MAX;
  consequently, the bounds check below becomes valid.  Previously, if a
  value over INT_MAX was passed in uap->nsops, the bounds check wouldn't
  catch it, and the value would be used to compute copyin()'s third
  argument.
  
  Obtained from:	NetBSD
  
  Revision  Changes    Path
  1.35      +6 -6      src/sys/kern/sysv_sem.c


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message