aboutsummaryrefslogtreecommitdiff
path: root/share/security/patches/EN-14:02/mmap.patch
diff options
context:
space:
mode:
authorXin LI <delphij@FreeBSD.org>2014-01-14 19:57:49 +0000
committerXin LI <delphij@FreeBSD.org>2014-01-14 19:57:49 +0000
commitdcb9c59cc230c67c4b8743c52c86d74b7320deb4 (patch)
tree2bee7a6bddc866019c4c10f02058b7ab21021102 /share/security/patches/EN-14:02/mmap.patch
parent1d54309d429a40f9944f9fcc7f85153db094f18a (diff)
downloaddoc-dcb9c59cc230c67c4b8743c52c86d74b7320deb4.tar.gz
doc-dcb9c59cc230c67c4b8743c52c86d74b7320deb4.zip
Add 4 latest advisories and 2 latest errata notices:
Fix bsnmpd remote denial of service vulnerability. [SA-14:01] Fix ntpd distributed reflection Denial of Service vulnerability. [SA-14:02] Fix OpenSSL multiple vulnerabilities. [SA-14:03] Fix BIND remote denial of service vulnerability. [SA-14:04] Disable hardware RNGs by default. [EN-14:01] Fix incorrect coalescing of stack entry with mmap. [EN-14:02]
Notes
Notes: svn path=/head/; revision=43519
Diffstat (limited to 'share/security/patches/EN-14:02/mmap.patch')
-rw-r--r--share/security/patches/EN-14:02/mmap.patch20
1 files changed, 20 insertions, 0 deletions
diff --git a/share/security/patches/EN-14:02/mmap.patch b/share/security/patches/EN-14:02/mmap.patch
new file mode 100644
index 0000000000..fd4040a881
--- /dev/null
+++ b/share/security/patches/EN-14:02/mmap.patch
@@ -0,0 +1,20 @@
+Index: sys/vm/vm_map.c
+===================================================================
+--- sys/vm/vm_map.c (revision 259950)
++++ sys/vm/vm_map.c (revision 259951)
+@@ -1207,6 +1207,7 @@ charged:
+ }
+ else if ((prev_entry != &map->header) &&
+ (prev_entry->eflags == protoeflags) &&
++ (cow & (MAP_ENTRY_GROWS_DOWN | MAP_ENTRY_GROWS_UP)) == 0 &&
+ (prev_entry->end == start) &&
+ (prev_entry->wired_count == 0) &&
+ (prev_entry->cred == cred ||
+@@ -3339,7 +3340,6 @@ vm_map_stack(vm_map_t map, vm_offset_t addrbos, vm
+ * NOTE: We explicitly allow bi-directional stacks.
+ */
+ orient = cow & (MAP_STACK_GROWS_DOWN|MAP_STACK_GROWS_UP);
+- cow &= ~orient;
+ KASSERT(orient != 0, ("No stack grow direction"));
+
+ if (addrbos < vm_map_min(map) ||