]> CyberLeo.Net >> Repos - FreeBSD/stable/10.git/commit
MFC r277806:
authordelphij <delphij@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Mon, 2 Feb 2015 18:48:49 +0000 (18:48 +0000)
committerdelphij <delphij@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Mon, 2 Feb 2015 18:48:49 +0000 (18:48 +0000)
commitef7ceea3613e090b02826d1fd6a07fd2d4511f9e
tree32fc525f8ebaaff4efe58cf5abfb3a4f8fa92c1f
parent1ada7a13a42502d6148cd64832cf85b9e33e31af
MFC r277806:

Use unsigned int for index value.

Without this change a local attacker could trigger a panic by
tricking the kernel into accessing undefined kernel memory.

We would like to acknowledge Francisco Falcon from CORE Security
Technologies who discovered the issue and reported to the
FreeBSD Security Team.

More information can be found at CORE Security's advisory at:
http://www.coresecurity.com/content/freebsd-kernel-multiple-vulnerabilities

This is an errata candidate for releng/10.1 and releng/9.3.  Earlier
releases are not affected.

Reported by:  Francisco Falcon from CORE Security Technologies
Security:     CVE-2014-0998
Reviewed by:  dumbbell

git-svn-id: svn://svn.freebsd.org/base/stable/10@278106 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
sys/dev/vt/vt_core.c