From owner-cvs-all  Wed Jun  5 17:43:48 2002
Delivered-To: cvs-all@freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP
	id B24AA37B75E; Wed,  5 Jun 2002 17:36:40 -0700 (PDT)
Received: (from bde@localhost)
	by freefall.freebsd.org (8.11.6/8.11.6) id g560ZIh98958;
	Wed, 5 Jun 2002 17:35:18 -0700 (PDT)
	(envelope-from bde)
Message-Id: <200206060035.g560ZIh98958@freefall.freebsd.org>
From: Bruce Evans <bde@FreeBSD.org>
Date: Wed, 5 Jun 2002 17:35:07 -0700 (PDT)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/sys/kern subr_diskslice.c
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

bde         2002/06/05 17:35:07 PDT

  Modified files:
    sys/kern             subr_diskslice.c 
  Log:
  Fixed overflow in the bounds checking in dscheck().  It assumed that
  daadr_t is no larger than a long, and some other relatively harmless
  things (*blush*).  Overflow for subtracting a daddr_t from a u_long
  caused "truncation" of the i/o for attempts to access blocks beyond
  the end of the actually cause expansion of the i/o to a preposterous
  size.
  
  Revision  Changes    Path
  1.104     +4 -4      src/sys/kern/subr_diskslice.c

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message