The following commit has been merged in the master branch:
commit 8ce4a3905268385d3f5a0e11f20594875467cae6
Author: Mark Vitale <[email protected]>
Date: Wed Jul 8 14:28:50 2015 -0400
Solaris: setpag should verify that ngroups will not overflow
Our ngroups management (since PAGs are still encoded as 2 groups) needs
to ensure that we do not overflow what we are prepared to handle,
and do not panic due to misheld mutexes if we have to return an error
when handling it.
FIXES 131878 (CVE-2015-3286)
Change-Id: I044d5e7d3161de815b3c2dace9c211fbb4b51ffa
src/afs/SOLARIS/osi_groups.c | 27 ++++++++++++++++++---------
1 files changed, 18 insertions(+), 9 deletions(-)
--
OpenAFS Master Repository
_______________________________________________
OpenAFS-cvs mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-cvs
