Searched hist:147302 (Results 1 - 4 of 4) sorted by relevance
| /freebsd-9.3-release/sys/sys/ | ||
| H A D | syscallsubr.h | diff 147302 Sat Jun 11 12:58:20 MDT 2005 pjd Do not allocate memory based on not-checked argument from userland. It can be used to panic the kernel by giving too big value. Fix it by moving allocation and size verification into kern_getfsstat(). This even simplifies kern_getfsstat() consumers, but destroys symmetry - memory is allocated inside kern_getfsstat(), but has to be freed by the caller. Found by: FreeBSD Kernel Stress Test Suite: http://www.holm.cc/stress/ Reported by: Peter Holm <peter@holm.cc> |
| /freebsd-9.3-release/sys/compat/freebsd32/ | ||
| H A D | freebsd32_misc.c | diff 147302 Sat Jun 11 12:58:20 MDT 2005 pjd Do not allocate memory based on not-checked argument from userland. It can be used to panic the kernel by giving too big value. Fix it by moving allocation and size verification into kern_getfsstat(). This even simplifies kern_getfsstat() consumers, but destroys symmetry - memory is allocated inside kern_getfsstat(), but has to be freed by the caller. Found by: FreeBSD Kernel Stress Test Suite: http://www.holm.cc/stress/ Reported by: Peter Holm <peter@holm.cc> |
| /freebsd-9.3-release/sys/kern/ | ||
| H A D | vfs_extattr.c | diff 147302 Sat Jun 11 12:58:20 MDT 2005 pjd Do not allocate memory based on not-checked argument from userland. It can be used to panic the kernel by giving too big value. Fix it by moving allocation and size verification into kern_getfsstat(). This even simplifies kern_getfsstat() consumers, but destroys symmetry - memory is allocated inside kern_getfsstat(), but has to be freed by the caller. Found by: FreeBSD Kernel Stress Test Suite: http://www.holm.cc/stress/ Reported by: Peter Holm <peter@holm.cc> |
| H A D | vfs_syscalls.c | diff 147302 Sat Jun 11 12:58:20 MDT 2005 pjd Do not allocate memory based on not-checked argument from userland. It can be used to panic the kernel by giving too big value. Fix it by moving allocation and size verification into kern_getfsstat(). This even simplifies kern_getfsstat() consumers, but destroys symmetry - memory is allocated inside kern_getfsstat(), but has to be freed by the caller. Found by: FreeBSD Kernel Stress Test Suite: http://www.holm.cc/stress/ Reported by: Peter Holm <peter@holm.cc> |
Completed in 351 milliseconds