diff options
author | Xin LI <delphij@FreeBSD.org> | 2014-01-14 19:57:49 +0000 |
---|---|---|
committer | Xin LI <delphij@FreeBSD.org> | 2014-01-14 19:57:49 +0000 |
commit | dcb9c59cc230c67c4b8743c52c86d74b7320deb4 (patch) | |
tree | 2bee7a6bddc866019c4c10f02058b7ab21021102 /share/security/patches/EN-14:02/mmap.patch | |
parent | 1d54309d429a40f9944f9fcc7f85153db094f18a (diff) | |
download | doc-dcb9c59cc230c67c4b8743c52c86d74b7320deb4.tar.gz doc-dcb9c59cc230c67c4b8743c52c86d74b7320deb4.zip |
Add 4 latest advisories and 2 latest errata notices:
Fix bsnmpd remote denial of service vulnerability. [SA-14:01]
Fix ntpd distributed reflection Denial of Service vulnerability.
[SA-14:02]
Fix OpenSSL multiple vulnerabilities. [SA-14:03]
Fix BIND remote denial of service vulnerability. [SA-14:04]
Disable hardware RNGs by default. [EN-14:01]
Fix incorrect coalescing of stack entry with mmap. [EN-14:02]
Notes
Notes:
svn path=/head/; revision=43519
Diffstat (limited to 'share/security/patches/EN-14:02/mmap.patch')
-rw-r--r-- | share/security/patches/EN-14:02/mmap.patch | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/share/security/patches/EN-14:02/mmap.patch b/share/security/patches/EN-14:02/mmap.patch new file mode 100644 index 0000000000..fd4040a881 --- /dev/null +++ b/share/security/patches/EN-14:02/mmap.patch @@ -0,0 +1,20 @@ +Index: sys/vm/vm_map.c +=================================================================== +--- sys/vm/vm_map.c (revision 259950) ++++ sys/vm/vm_map.c (revision 259951) +@@ -1207,6 +1207,7 @@ charged: + } + else if ((prev_entry != &map->header) && + (prev_entry->eflags == protoeflags) && ++ (cow & (MAP_ENTRY_GROWS_DOWN | MAP_ENTRY_GROWS_UP)) == 0 && + (prev_entry->end == start) && + (prev_entry->wired_count == 0) && + (prev_entry->cred == cred || +@@ -3339,7 +3340,6 @@ vm_map_stack(vm_map_t map, vm_offset_t addrbos, vm + * NOTE: We explicitly allow bi-directional stacks. + */ + orient = cow & (MAP_STACK_GROWS_DOWN|MAP_STACK_GROWS_UP); +- cow &= ~orient; + KASSERT(orient != 0, ("No stack grow direction")); + + if (addrbos < vm_map_min(map) || |