Module Name: src Committed By: bouyer Date: Mon Apr 21 21:04:25 UTC 2014
Modified Files: src/doc [netbsd-6-1]: CHANGES-6.1.5 Log Message: ticket 1051 To generate a diff of this commit: cvs rdiff -u -r1.1.2.3 -r1.1.2.4 src/doc/CHANGES-6.1.5 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
Modified files: Index: src/doc/CHANGES-6.1.5 diff -u src/doc/CHANGES-6.1.5:1.1.2.3 src/doc/CHANGES-6.1.5:1.1.2.4 --- src/doc/CHANGES-6.1.5:1.1.2.3 Mon Apr 21 10:18:39 2014 +++ src/doc/CHANGES-6.1.5 Mon Apr 21 21:04:25 2014 @@ -1,4 +1,4 @@ -# $NetBSD: CHANGES-6.1.5,v 1.1.2.3 2014/04/21 10:18:39 bouyer Exp $ +# $NetBSD: CHANGES-6.1.5,v 1.1.2.4 2014/04/21 21:04:25 bouyer Exp $ A complete list of changes from the NetBSD 6.1.4 release to the NetBSD 6.1.5 release: @@ -64,3 +64,12 @@ sys/ufs/mfs/mfs_vfsops.c 1.107 via pat by a local user to panic the system. [maxv, ticket #1050] +sys/compat/linux/common/linux_exec_elf32.c 1.91 via patch + + A specially-crafted linux binary could easily control a kernel array + index. + Add some checks to ensure that nothing will be read outside the + allocated area. + Rewrite the code so that we don't need to allocate the whole section. + [maxv, ticket #1051] +