[Bug 266136] ctl_ioctl() passes user-supplied size directly to kernel malloc() -> potential crash

[bugzilla-noreply]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=266136

--- Comment #2 from Ed Maste <ema...@freebsd.org> ---
(In reply to Alexander Motin from comment #1)

Thanks

Please make a note in the commit message about the device being available only
to root (and hence not requiring an advisory).

-- 
You are receiving this mail because:
You are the assignee for the bug.