1d2d5501f9
stops users being able to cause setgroups to clobber the kernel stack by copying in data past the end of the linux_gidset array.