From owner-freebsd-hackers@FreeBSD.ORG  Thu Sep 16 23:59:38 2004
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A74D916A4CE
	for <freebsd-hackers@freebsd.org>;
	Thu, 16 Sep 2004 23:59:38 +0000 (GMT)
Received: from www.linux.org.uk (parcelfarce.linux.theplanet.co.uk
	[195.92.249.252])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 4B48843D48
	for <freebsd-hackers@freebsd.org>;
	Thu, 16 Sep 2004 23:59:38 +0000 (GMT)
	(envelope-from viro@www.linux.org.uk)
Received: from viro by www.linux.org.uk with local (Exim 4.33)
	id 1C86A5-0007GJ-1K; Fri, 17 Sep 2004 00:59:37 +0100
Date: Fri, 17 Sep 2004 00:59:36 +0100
From: viro@parcelfarce.linux.theplanet.co.uk
To: gerarra@tin.it
Message-ID: <20040916235936.GO23987@parcelfarce.linux.theplanet.co.uk>
References: <4146316C000077FD@ims3a.cp.tin.it>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <4146316C000077FD@ims3a.cp.tin.it>
User-Agent: Mutt/1.4.1i
Sender: <viro@www.linux.org.uk>
cc: freebsd-hackers@freebsd.org
Subject: Re: FreeBSD Kernel buffer overflow
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 16 Sep 2004 23:59:38 -0000

On Fri, Sep 17, 2004 at 01:29:22AM +0200, gerarra@tin.it wrote:
> Inside the kernel? i can define a syscall accepting 30 args and it could
> send in panic freebsd kernel. I think it's a problem and a patch 'must'
> occur.

You could also define a syscall with no arguments and have it call
panic(9).  So what?