summaryrefslogtreecommitdiffstats
path: root/lib/libc/stdlib/tdelete.c
diff options
context:
space:
mode:
authormjg <mjg@FreeBSD.org>2015-12-18 16:33:15 +0000
committermjg <mjg@FreeBSD.org>2015-12-18 16:33:15 +0000
commite70da8e2e976b377d257e1b3b13de2941a7e4d60 (patch)
treee5617784c481aef03a1cc8e9f60f7fbd887db6ca /lib/libc/stdlib/tdelete.c
parentde5d4c25ab779a6fb9ecc67a45b7d63d1fd4b36e (diff)
downloadFreeBSD-src-e70da8e2e976b377d257e1b3b13de2941a7e4d60.zip
FreeBSD-src-e70da8e2e976b377d257e1b3b13de2941a7e4d60.tar.gz
proc: fix a race which could result in dereference of bad p_pgrp pointer on fork
During fork p_starcopy - p_endcopy area of a process is populated with bcopy with only proc lock held. Another forking thread can find such a process and proceed to access p_pgrp included in said area. Fix the problem by moving the field outside. It is being properly assigned later. Reviewed by: kib Diagnosed by: kib Tested by: Fabian Keil <freebsd-listen fabiankeil.de> MFC after: 10 days
Diffstat (limited to 'lib/libc/stdlib/tdelete.c')
0 files changed, 0 insertions, 0 deletions
OpenPOWER on IntegriCloud