Protecting against kernel NULL-pointer derefs

Pieter de Boer pieter at thedarkside.nl
Tue Sep 15 13:01:00 UTC 2009


Dag-Erling Smørgrav wrote:

>> 'amount' => 2, 'of late' is more figure of speech than anything
>> else. For me, amount was high enough to get interested and 'of late'
>> may be because I've not been looking long enough.
> 
> A search of FreeBSD security advisories shows two in the last four
> years, plus the current unreleased issue.  I agree that there is no
> reason to allow applications to mmap() at address 0, but surely there
> must be a better way to make your case than to sow FUD?
I have no intention to sow FUD. Three such advisories is not much, but 
if there is a simple/inexpensive way to ensure that such bugs are not 
exploitable to gain root, I think 'we' should consider it.

-- 
Pieter


More information about the freebsd-security mailing list