freebsd-skq/sys/dev/vt
delphij 00fdf5663a MFC r277806:
Use unsigned int for index value.

Without this change a local attacker could trigger a panic by
tricking the kernel into accessing undefined kernel memory.

We would like to acknowledge Francisco Falcon from CORE Security
Technologies who discovered the issue and reported to the
FreeBSD Security Team.

More information can be found at CORE Security's advisory at:
http://www.coresecurity.com/content/freebsd-kernel-multiple-vulnerabilities

This is an errata candidate for releng/10.1 and releng/9.3.  Earlier
releases are not affected.

Reported by:  Francisco Falcon from CORE Security Technologies
Security:     CVE-2014-0998
Reviewed by:  dumbbell
2015-02-02 18:48:49 +00:00
..
colors vt(4): Colors are indexed against a console palette, not a VGA palette 2014-08-21 10:18:42 +00:00
font MFC vt(4) improvements / sync with HEAD 2014-09-04 20:18:08 +00:00
hw MFC 271381-271382,271385,271463-271466,271485,271506 2014-09-22 10:21:08 +00:00
logo MFC 271381-271382,271385,271463-271466,271485,271506 2014-09-22 10:21:08 +00:00
vt_buf.c vt(4): Adjust the cursor position after changing the window size 2014-11-22 16:55:55 +00:00
vt_consolectl.c MFC 271381-271382,271385,271463-271466,271485,271506 2014-09-22 10:21:08 +00:00
vt_core.c MFC r277806: 2015-02-02 18:48:49 +00:00
vt_font.c
vt_sysmouse.c MFC vt(4) mouse cursor improvements from dumbbell: 2014-09-03 13:40:02 +00:00
vt.h vt(4): Support syscons' SC_HISTORY_SIZE to configure history size 2014-11-22 17:47:03 +00:00