On Wed, Dec 06, 2006 at 03:50:06AM -0800, Simon Schubert wrote: > corecode 2006/12/06 03:50:06 PST > > DragonFly src repository > > Modified files: > sys/bus/firewire fwdev.c > Log: > Correct a signedness bug which allowed members of the operator > group to read kernel memory. > > Obtained-from: FreeBSD / FreeBSD-SA-06:25.kmem > > Revision Changes Path > 1.18 +1 -1 src/sys/bus/firewire/fwdev.c > > > http://www.dragonflybsd.org/cvsweb/src/sys/bus/firewire/fwdev.c.diff?r1=1.17&r2=1.18&f=u
Note that the problem is *NOT* exploitable on DragonFly. The advisory from FreeBSD is overdefensive as a number of platforms are by design not affected, including i386. Joerg
