upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-05-28 04:12:45 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fixed bug I just introduced that would have allowed a user to clobber

Browse source 
his kernel stack.
This commit is contained in:
David Greenman 1994-10-18 04:40:41 +00:00
parent 0ec663d53a
commit 1b4bb67169
2 changed files with 12 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
sys/fs/procfs/procfs_mem.c
View file

@ -37,7 +37,7 @@
*
* @(#)procfs_mem.c 8.4 (Berkeley) 1/21/94
*
* $Id: procfs_mem.c,v 1.3 1994/09/15 19:47:47 bde Exp $
* $Id: procfs_mem.c,v 1.4 1994/10/18 04:26:53 davidg Exp $
*/
/*
@ -86,9 +86,11 @@ procfs_rwmem(p, uio)
int fix_prot;
uva = (vm_offset_t) uio->uio_offset;
if (uva >= VM_MAXUSER_ADDRESS + UPAGES * PAGE_SIZE) {
error = 0;
break;
if (uva >= VM_MAXUSER_ADDRESS) {
if (writing || (uva >= (VM_MAXUSER_ADDRESS + UPAGES * PAGE_SIZE))) {
error = 0;
break;
}
}
/*

10
sys/miscfs/procfs/procfs_mem.c
View file

@ -37,7 +37,7 @@
*
* @(#)procfs_mem.c 8.4 (Berkeley) 1/21/94
*
* $Id: procfs_mem.c,v 1.3 1994/09/15 19:47:47 bde Exp $
* $Id: procfs_mem.c,v 1.4 1994/10/18 04:26:53 davidg Exp $
*/
/*
@ -86,9 +86,11 @@ procfs_rwmem(p, uio)
int fix_prot;
uva = (vm_offset_t) uio->uio_offset;
if (uva >= VM_MAXUSER_ADDRESS + UPAGES * PAGE_SIZE) {
error = 0;
break;
if (uva >= VM_MAXUSER_ADDRESS) {
if (writing || (uva >= (VM_MAXUSER_ADDRESS + UPAGES * PAGE_SIZE))) {
error = 0;
break;
}
}
/*