]> CyberLeo.Net >> Repos - FreeBSD/stable/9.git/commit
MFC r277806:
authordelphij <delphij@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Mon, 2 Feb 2015 18:48:49 +0000 (18:48 +0000)
committerdelphij <delphij@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Mon, 2 Feb 2015 18:48:49 +0000 (18:48 +0000)
commitc46fb8ec10127a93f91a97d4ca0cf25ac0fb0519
tree74e66c33952a03b11dbd8c1b0281b29dfb179f4f
parentb0c0d78370c5f72fc252a947bf74a7f754519f0a
MFC r277806:

Use unsigned int for index value.

Without this change a local attacker could trigger a panic by
tricking the kernel into accessing undefined kernel memory.

We would like to acknowledge Francisco Falcon from CORE Security
Technologies who discovered the issue and reported to the
FreeBSD Security Team.

More information can be found at CORE Security's advisory at:
http://www.coresecurity.com/content/freebsd-kernel-multiple-vulnerabilities

This is an errata candidate for releng/10.1 and releng/9.3.  Earlier
releases are not affected.

Reported by:  Francisco Falcon from CORE Security Technologies
Security:     CVE-2014-0998
Reviewed by:  dumbbell

git-svn-id: svn://svn.freebsd.org/base/stable/9@278106 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
sys/dev/vt/vt_core.c