Date: Tue, 25 Oct 2016 21:36:41 +0200 From: Oliver Pinter <oliver.pinter@hardenedbsd.org> To: Tijl Coosemans <tijl@freebsd.org> Cc: Gleb Smirnoff <glebius@freebsd.org>, kib@freebsd.org, svn-src-head@freebsd.org, svn-src-all@freebsd.org, src-committers@freebsd.org Subject: Re: svn commit: r307936 - head/sys/amd64/amd64 Message-ID: <CAPQ4ffsV3KJT1SvGHHDqqjQchqKxv74VJDRepuio=6jOcJTM=Q@mail.gmail.com> In-Reply-To: <20161025212600.36e91455@kalimero.tijl.coosemans.org> References: <201610251713.u9PHDkq2076226@repo.freebsd.org> <20161025212600.36e91455@kalimero.tijl.coosemans.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On 10/25/16, Tijl Coosemans <tijl@freebsd.org> wrote: > On Tue, 25 Oct 2016 17:13:46 +0000 (UTC) Gleb Smirnoff <glebius@FreeBSD.org> > wrote: >> Author: glebius >> Date: Tue Oct 25 17:13:46 2016 >> New Revision: 307936 >> URL: https://svnweb.freebsd.org/changeset/base/307936 >> >> Log: >> The argument validation in r296956 was not enough to close all possible >> overflows in sysarch(2). >> >> Submitted by: Kun Yang <kun.yang chaitin.com> >> Patch by: kib >> Security: SA-16:15 >> >> Modified: >> head/sys/amd64/amd64/sys_machdep.c > > This patch and r296956 need to be applied to i386 too, don't they? And what's about this for i386: commit 3f32edbd77088eb3437503cca9fc4881d8e382e6 Author: tijl <tijl@FreeBSD.org> Date: Sun Sep 25 18:29:02 2016 +0000 MFamd64: r266901 Allocate a zeroed LDT. Failing to do this might result in the LDT appearing to run out of free descriptors because of random junk in the descriptor's 'sd_type' field. http://lists.freebsd.org/pipermail/freebsd-amd64/2014-May/016088.html PR: 212639 Submitted by: wheelcomplex@gmail.com MFC after: 2 weeks > _______________________________________________ > svn-src-head@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/svn-src-head > To unsubscribe, send any mail to "svn-src-head-unsubscribe@freebsd.org" >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAPQ4ffsV3KJT1SvGHHDqqjQchqKxv74VJDRepuio=6jOcJTM=Q>