CVSROOT: /cvs Module name: src Changes by: [email protected] 2019/02/04 00:04:28
Modified files:
sys/kern : sysv_sem.c
Log message:
When freeing the sem_undo structure in semundo_adjust(), update the
caller supplied pointer. Otherwise, the caller is left with a dangling
pointer that could lead to a use-after-free panic.
ok millert@ visa@
Reported-by: [email protected]
Reported-by: [email protected]
