cvs commit: src/sys/kern sysv_shm.c

Jeroen Ruigrok/asmodai asmodai at
Thu Feb 5 23:40:56 PST 2004

-On [20040205 20:02], David Rhodus (drhodus at xxxxxxxxxxxxxxxxxxxxxxx) wrote:
>    Modified files:
>      sys/kern             sysv_shm.c
>    Log:
>    Correct a reference counting bug in shmat(2).  If vm_map_find(9)
>    failed, the reference count for the virtual memory object referenced
>    by the specified shared memory segment would have been erroneously
>    incremented.

Just to make it clear:

this can allow local users to elevate their privileges.

Jeroen Ruigrok van der Werven <asmodai(at)> / asmodai / kita no mono
PGP fingerprint: 2D92 980E 45FE 2C28 9DB7  9D88 97E6 839B 2EAC 625B   |
Those who would give up their freedoms to secure temporary safety deserve
neither freedom or safety.

More information about the Commits mailing list