freebsd-skq/sys
Konstantin Belousov 3fc292d56b Old process credentials for setuid execve must not be dereferenced
when the process credentials were not changed.  This can happen if an
error occured trying to activate the setuid binary.  And on error, if
new credentials were not yet assigned, they must be freed to not
create the leak.

Use oldcred == NULL as the predicate to detect credential
reassignment.

Reported and tested by:	pho
Sponsored by:	The FreeBSD Foundation
2016-06-08 04:37:03 +00:00
..
amd64 Avoid spurious EINVAL in amd64 pmap_change_attr(). 2016-06-05 17:11:23 +00:00
arm Start to clean MIDR values using the CPUID scheme. We don't need to know 2016-06-07 18:50:36 +00:00
arm64 Switch arm64 to use intrng by default. The old interrupt handling code can 2016-06-07 20:14:08 +00:00
boot Use the UEFI event timer to update the time on arm and arm64. The current 2016-06-04 08:47:45 +00:00
bsm
cam Fix memory leaks in (a|)daregister introduced in r298002 2016-06-07 20:33:55 +00:00
cddl zfs: set VROOT / VV_ROOT consistently and in a single place 2016-06-03 14:37:18 +00:00
compat Fallback to arc4rand() in the LinuxKPI when read_random() returns 2016-06-07 13:10:13 +00:00
conf hyperv: Move machine dependent bits into machine dependent files. 2016-06-06 05:55:37 +00:00
contrib [ath_hal] add AR9462 (jupiter) RX gain / XLNA programming. 2016-06-05 05:55:27 +00:00
crypto Connect the SHA-512t256 and Skein hashing algorithms to ZFS 2016-05-31 04:12:14 +00:00
ddb Add a small set of logical operators to DDB command language. 2016-05-16 19:42:38 +00:00
dev - Replace the magic numbers with something more readable. 2016-06-08 02:37:23 +00:00
fs Fix a style bug. 2016-06-08 02:39:10 +00:00
gdb
geom When we are in panic, always go the asynchronous path in g_mirror_destroy(), 2016-06-01 22:11:54 +00:00
gnu Revert changes for local testing, inadvertantly commited in r300811. 2016-05-26 23:59:42 +00:00
i386 Add macro to convert errno and use it when appropriate. 2016-05-22 12:46:34 +00:00
isa
kern Old process credentials for setuid execve must not be dereferenced 2016-06-08 04:37:03 +00:00
kgssapi
libkern
mips Get rid of struct proc p_sched and struct thread td_sched pointers. 2016-06-05 17:04:03 +00:00
modules ng_mppc(4): Bring netgraph(3) MPPC compression support. 2016-06-07 15:07:00 +00:00
net iflib: Improve cleanup on iflib_queues_alloc error path 2016-06-07 20:26:00 +00:00
net80211 net80211: replace m_getcl/m_gethdr pair with m_get2 in ieee80211_fragment() 2016-05-28 19:13:39 +00:00
netgraph Disconnect LE socket when the HCI connection associated is disconnected. 2016-06-07 16:57:13 +00:00
netinet net: Use M_HASHTYPE_OPAQUE_HASH if the mbuf flowid has hash properties 2016-06-07 04:51:50 +00:00
netinet6 Make KASSERT message more useful by printing the variables on which 2016-06-06 22:34:12 +00:00
netipsec netipsec: Fix minor style nit 2016-05-10 20:14:11 +00:00
netnatm
netpfil Fix 4-byte overflow in ipv6_writemask. 2016-06-05 10:33:53 +00:00
netsmb
nfs
nfsclient
nfsserver
nlm
ofed net: Use M_HASHTYPE_OPAQUE_HASH if the mbuf flowid has hash properties 2016-06-07 04:51:50 +00:00
opencrypto sys/opencrypto: minor spelling fixes. 2016-05-06 23:37:19 +00:00
pc98
powerpc Fix the deciKelvin to Celsius conversion in kernel. 2016-05-22 13:58:32 +00:00
riscv Fix typos. 2016-06-02 15:14:40 +00:00
rpc Quell false positives in svc_vc_create and svc_vc_create_conn with cd and xprt 2016-05-27 08:48:33 +00:00
security sys/security: minor spelling fixes. 2016-05-06 16:59:04 +00:00
sparc64 Add macro to convert errno and use it when appropriate. 2016-05-22 12:46:34 +00:00
sys Introduce the PD_CLOEXEC for pdfork(2). 2016-06-08 02:09:14 +00:00
teken
tests
tools
ufs arc4random() returns 0 to (2**32)−1, use an alternative to initialize 2016-05-22 14:31:20 +00:00
vm Reset the page busy lock state after failing to insert into the object. 2016-06-02 17:11:24 +00:00
x86 Trim some spaces to record correct commit message for the r301278. 2016-06-03 18:23:45 +00:00
xdr
xen xen: Correct typo in #undef for symbol NBPL 2016-06-06 14:55:46 +00:00
Makefile