Date: Thu, 21 Jan 2010 19:11:18 +0000 (UTC) From: John Baldwin <jhb@FreeBSD.org> To: cvs-src-old@freebsd.org Subject: cvs commit: src/sys/kern kern_exec.c kern_ktrace.c subr_bus.c subr_taskqueue.c src/sys/sys interrupt.h Message-ID: <201001211912.o0LJCj7N096996@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
jhb 2010-01-21 19:11:18 UTC FreeBSD src repository Modified files: (Branch: RELENG_8) sys/kern kern_exec.c kern_ktrace.c subr_bus.c subr_taskqueue.c sys/sys interrupt.h Log: SVN rev 202764 on 2010-01-21 19:11:18Z by jhb MFC 198411: - Fix several off-by-one errors when using MAXCOMLEN. The p_comm[] and td_name[] arrays are actually MAXCOMLEN + 1 in size and a few places that created shadow copies of these arrays were just using MAXCOMLEN. - Prefer using sizeof() of an array type to explicit constants for the array length in a few places. - Ensure that all of p_comm[] and td_name[] is always zero'd during execve() to guard against any possible information leaks. Previously trailing garbage in p_comm[] could be leaked to userland in ktrace record headers via td_name[]. Revision Changes Path 1.337.2.4 +7 -13 src/sys/kern/kern_exec.c 1.130.2.2 +6 -1 src/sys/kern/kern_ktrace.c 1.225.2.9 +1 -1 src/sys/kern/subr_bus.c 1.48.2.5 +2 -2 src/sys/kern/subr_taskqueue.c 1.45.2.3 +3 -3 src/sys/sys/interrupt.h
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201001211912.o0LJCj7N096996>