CVSROOT: /cvs Module name: src Changes by: [email protected] 2026/07/12 16:05:32
Modified files:
sys/kern : sysv_msg.c
Log message:
sysv: Use zero-based message queue indices
que_ix starts at one, while KERN_SYSVIPC_MSG_INFO allocates msgmni
entries and uses que_ix directly as an array index. The last permitted
queue therefore makes sysctl_sysvmsg() copy one struct msqid_ds past the
allocation, which KASAN detects.
OK: mvs@
