From owner-cvs-all  Sun Jul 23  9:54:29 2000
Delivered-To: cvs-all@freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21])
	by hub.freebsd.org (Postfix) with ESMTP
	id 2541937B63A; Sun, 23 Jul 2000 09:54:19 -0700 (PDT)
	(envelope-from marcel@FreeBSD.org)
Received: (from marcel@localhost)
	by freefall.freebsd.org (8.9.3/8.9.2) id JAA35253;
	Sun, 23 Jul 2000 09:54:19 -0700 (PDT)
	(envelope-from marcel@FreeBSD.org)
Message-Id: <200007231654.JAA35253@freefall.freebsd.org>
From: Marcel Moolenaar <marcel@FreeBSD.org>
Date: Sun, 23 Jul 2000 09:54:19 -0700 (PDT)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/sys/i386/linux linux_misc.c linux_util.c
         linux_util.h
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

marcel      2000/07/23 09:54:19 PDT

  Modified files:
    sys/i386/linux       linux_misc.c linux_util.c linux_util.h 
  Log:
  Add bounds checking to stackgap_alloc. Previously it was possible
  to construct a path that was long enough (ie longer than
  SPARE_USRSPACE bytes) and trash the stack.
  
  Note that SPARE_USRSPACE is much smaller than MAXPATHLEN so that
  the Linuxulator will now return ENAMETOOLONG even if the path
  is smaller than MAXPATHLEN.
  
  PR: 12749
  
  Revision  Changes    Path
  1.82      +3 -1      src/sys/i386/linux/linux_misc.c
  1.11      +5 -2      src/sys/i386/linux/linux_util.c
  1.11      +9 -11     src/sys/i386/linux/linux_util.h



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message