diff options
author | des <des@FreeBSD.org> | 2013-09-10 10:05:59 +0000 |
---|---|---|
committer | des <des@FreeBSD.org> | 2013-09-10 10:05:59 +0000 |
commit | 21e6fd796b765b83afb4869cb49eb219ade8c54d (patch) | |
tree | 9f08d8dd919edd55c79e7cca2864adf598448f6e /sys/kern/sys_procdesc.c | |
parent | 96543c86c6fa7e82c3f4df84a1f9ad5a8a844674 (diff) | |
download | FreeBSD-src-21e6fd796b765b83afb4869cb49eb219ade8c54d.zip FreeBSD-src-21e6fd796b765b83afb4869cb49eb219ade8c54d.tar.gz |
Fix the length calculation for the final block of a sendfile(2)
transmission which could be tricked into rounding up to the nearest
page size, leaking up to a page of kernel memory. [13:11]
In IPv6 and NetATM, stop SIOCSIFADDR, SIOCSIFBRDADDR, SIOCSIFDSTADDR
and SIOCSIFNETMASK at the socket layer rather than pass them on to the
link layer without validation or credential checks. [SA-13:12]
Prevent cross-mount hardlinks between different nullfs mounts of the
same underlying filesystem. [SA-13:13]
Security: CVE-2013-5666
Security: FreeBSD-SA-13:11.sendfile
Security: CVE-2013-5691
Security: FreeBSD-SA-13:12.ifioctl
Security: CVE-2013-5710
Security: FreeBSD-SA-13:13.nullfs
Approved by: re
Diffstat (limited to 'sys/kern/sys_procdesc.c')
0 files changed, 0 insertions, 0 deletions