diff options
| author | nectar <nectar@FreeBSD.org> | 2003-08-10 23:04:55 +0000 |
|---|---|---|
| committer | nectar <nectar@FreeBSD.org> | 2003-08-10 23:04:55 +0000 |
| commit | f5b9f87e772a6fcee8bcad474c3fd99d063c15d4 (patch) | |
| tree | 12f0209fc6a10880cdeb076f627efa787cd2a715 /sys/i386/isa | |
| parent | 09416455b19e2f92a8958f72868349089319992a (diff) | |
| download | FreeBSD-src-f5b9f87e772a6fcee8bcad474c3fd99d063c15d4.zip FreeBSD-src-f5b9f87e772a6fcee8bcad474c3fd99d063c15d4.tar.gz | |
Add or correct range checking of signal numbers in system calls and
ioctls.
In the particular case of ptrace(), this commit more-or-less reverts
revision 1.53 of sys_process.c, which appears to have been erroneous.
Reviewed by: iedowse, jhb
Diffstat (limited to 'sys/i386/isa')
| -rw-r--r-- | sys/i386/isa/spigot.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/sys/i386/isa/spigot.c b/sys/i386/isa/spigot.c index b07066b..0b568f3 100644 --- a/sys/i386/isa/spigot.c +++ b/sys/i386/isa/spigot.c @@ -222,6 +222,8 @@ struct spigot_info *info; if(!data) return(EINVAL); switch(cmd){ case SPIGOT_SETINT: + if (*(int *)data < 0 || *(int *)data > _SIG_MAXSIG) + return EINVAL; ss->p = td->td_proc; ss->signal_num = *((int *)data); break; |
