kern/113218: [sysvipc] [patch] Overflow in shmget's memory size check

Vasim Valejev vasim at resume-bank.ru
Mon Jun 4 12:50:09 UTC 2007


The following reply was made to PR kern/113218; it has been noted by GNATS.

From: "Vasim Valejev" <vasim at resume-bank.ru>
To: <bug-followup at FreeBSD.org>,
	"Vasim Valejev" <vasim at resume-bank.ru>
Cc:  
Subject: Re: kern/113218: [sysvipc] [patch] Overflow in shmget's memory size check
Date: Mon, 4 Jun 2007 16:16:13 +0400

 Just found that there more modifications needed. Big chunk of shared memory (2GB
 or more) won't deallocate properly because "shmid_ds" structure has int type for
 "shm_segsz" field. So, will need to change in sys/sys/shm.h (and
 /usr/include/sys/shm.h), sysv_shm.c (there is shmid_ds's definition too) and
 usr.bin/ipcs/ipcs.c source ("%12d" -> "%12ld" in line that prints segment size
 information).
 
 Vasim V.
 


More information about the freebsd-bugs mailing list