Dag-Erling Smørgrav wrote:

'amount' => 2, 'of late' is more figure of speech than anything
else. For me, amount was high enough to get interested and 'of late'
may be because I've not been looking long enough.

A search of FreeBSD security advisories shows two in the last four
years, plus the current unreleased issue.  I agree that there is no
reason to allow applications to mmap() at address 0, but surely there
must be a better way to make your case than to sow FUD?
I have no intention to sow FUD. Three such advisories is not much, but if there is a simple/inexpensive way to ensure that such bugs are not exploitable to gain root, I think 'we' should consider it.

--
Pieter
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[email protected]"

Reply via email to