Fwd: cvs commit: src/sys/kern vfs_subr.c src/sys/net if_mib.c src/sys/netinet in_pcb.c

[Simon 'corecode' Schubert]

Everybody is advised to cvsup and recompile the kernel. The fix will 
appear in RELEASE 1.2 soon, too.

cheers
  simon

[1] 
http://lists.freebsd.org/pipermail/freebsd-security-notifications/2005-May/000045.html

----------  Forwarded Message  ----------

Subject: cvs commit: src/sys/kern vfs_subr.c src/sys/net if_mib.c 
src/sys/netinet in_pcb.c
Date: Friday, 6. May 2005 13:52
From: Simon Schubert <corecode at xxxxxxxxxxxxxxxxxxxxxxx>

corecode    2005/05/06 04:52:02 PDT

DragonFly src repository

  Modified files:
    sys/kern             vfs_subr.c
    sys/net              if_mib.c
    sys/netinet          in_pcb.c
  Log:
  Bring in fix from FreeBSD/cperciva:
    Log:
    If we are going to
    1. Copy a NULL-terminated string into a fixed-length buffer, and
    2. copyout that buffer to userland,
    we really ought to
    0. Zero the entire buffer
    first.

    Security: FreeBSD-SA-05:08.kmem

  Thanks to Colin Percival for notifying us!

  Revision  Changes    Path
  1.56      +1 -0      src/sys/kern/vfs_subr.c
  1.5       +1 -0      src/sys/net/if_mib.c
  1.35      +1 -0      src/sys/netinet/in_pcb.c


http://www.dragonflybsd.org/cvsweb/src/sys/kern/vfs_subr.c.diff?r1=1.55&r
2=1.56&f=u
 http://www.dragonflybsd.org/cvsweb/src/sys/net/if_mib.c.diff?r1=1.4&r2=1
.5&f=u
 http://www.dragonflybsd.org/cvsweb/src/sys/netinet/in_pcb.c.diff?r1=1.34
&r2=1.35&f=u

-------------------------------------------------------

-- 
Serve - BSD     +++  RENT this banner advert  +++    ASCII Ribbon   /"\
Work - Mac      +++  space for low $$$ NOW!1  +++      Campaign     \ /
Party Enjoy Relax   |   http://dragonflybsd.org      Against  HTML   \
Dude 2c 2 the max   !   http://golden-apple.biz       Mail + News   / \
Attachment:
pgp00002.pgp
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pgp00002.pgp
Type: application/octet-stream
Size: 187 bytes
Desc: "Description: PGP signature"
URL: <http://lists.dragonflybsd.org/pipermail/users/attachments/20050506/224fbe22/attachment-0020.obj>