cvs commit: src/sys/i386/i386 sys_machdep.c

[David Schultz]

das         2005-03-23 08:28:03 UTC

  FreeBSD src repository

  Modified files:
    sys/i386/i386        sys_machdep.c 
  Log:
  Bounds check the length parameter to i386_set_ldt() before passing it
  to kmem_alloc().  Failure to do this made it possible for user
  processes to cause a hard lock on i386 kernels.  I believe this only
  affects 6-CURRENT on or after 2005-01-26.
  
  Found by:       Coverity Prevent analysis tool
  Security:       Local DOS
  
  Revision  Changes    Path
  1.96      +2 -0      src/sys/i386/i386/sys_machdep.c