diff options
author | delphij <delphij@FreeBSD.org> | 2017-06-15 04:37:23 +0000 |
---|---|---|
committer | delphij <delphij@FreeBSD.org> | 2017-06-15 04:37:23 +0000 |
commit | 9560b2ab6ab01387d29eb13010574613cb63054e (patch) | |
tree | f4cd418ee7cef6f5d567c07d4d5d8892c3d87a4c /etc/gettytab | |
parent | 06562c7fa75ee76a9e140dcda66998e083c2cbef (diff) | |
download | FreeBSD-src-9560b2ab6ab01387d29eb13010574613cb63054e.zip FreeBSD-src-9560b2ab6ab01387d29eb13010574613cb63054e.tar.gz |
MFC r319852:
Fix buffer lengths.
After r319369, the RPC code validates caller supplied buffer length in
taddr2uaddr. When no -h is specified, the sizeof(ai_addr) is used,
which is always smaller than the required size and therefore uaddr
would be NULL, causing the kernel to copyin() from userland NULL
and fail with EFAULT.
Diffstat (limited to 'etc/gettytab')
0 files changed, 0 insertions, 0 deletions