pjd be79126844 Do not allocate memory based on not-checked argument from userland. ...

It can be used to panic the kernel by giving too big value.
Fix it by moving allocation and size verification into kern_getfsstat().
This even simplifies kern_getfsstat() consumers, but destroys symmetry -
memory is allocated inside kern_getfsstat(), but has to be freed by the
caller.

Found by:	FreeBSD Kernel Stress Test Suite: http://www.holm.cc/stress/
Reported by:	Peter Holm <peter@holm.cc>

2005-06-11 14:58:20 +00:00

..

alpha

Do not allocate memory based on not-checked argument from userland.

2005-06-11 14:58:20 +00:00

amd64

Introduce a procedure, pmap_page_init(), that initializes the

2005-06-10 03:33:36 +00:00

arm

Remove the last use of pmap_initialized.

2005-06-10 13:31:30 +00:00

boot

Fix getsecs(). It was not counting the seconds right. The immediate

2005-06-04 21:55:51 +00:00

bsm

For consistency with more system include files, add a trailing '_' to

2005-05-29 16:11:34 +00:00

cam

Add a quirk for my pen-drive.

2005-06-09 17:35:04 +00:00

coda

- Change all filesystems and vfs_cache to relock the dvp once the child is

2005-04-13 10:59:09 +00:00

compat

Do not allocate memory based on not-checked argument from userland.

2005-06-11 14:58:20 +00:00

conf

- Hook up atkbdc(4), atkbd(4) and psm(4) to the sparc64 build, not

2005-06-10 20:58:59 +00:00

contrib

Defer ip_output of pfsync updates to an independent callout thread instead

2005-06-10 17:23:49 +00:00

crypto

gbde(8) is also rejndael user.

2005-03-11 22:07:04 +00:00

ddb

Don't enter the debugger if KDB_UNATTENDED is set or if

2005-04-20 20:52:46 +00:00

dev

Avoid GCC optimizations from injecting a call to memset(?) in order

2005-06-11 03:21:20 +00:00

doc

…

fs

Avoid casting from (int *) to (size_t *) in order to fix udf_iconv on amd64.

2005-06-05 02:09:48 +00:00

gdb

check return value of gdb_rx_varhex

2005-03-28 18:31:18 +00:00

geom

After provider creation!!

2005-05-25 15:54:17 +00:00

gnu

Allow EVFILT_VNODE events to work on every filesystem type, not just

2005-06-09 20:20:31 +00:00

i4b

Stop embedding struct ifnet at the top of driver softcs. Instead the

2005-06-10 16:49:24 +00:00

i386

- Hook up the new locations of the atkbdc(4), atkbd(4) and psm(4) source

2005-06-10 20:56:38 +00:00

ia64

Introduce a procedure, pmap_page_init(), that initializes the

2005-06-10 03:33:36 +00:00

isa

- Hook up the new locations of the atkbdc(4), atkbd(4) and psm(4) source

2005-06-10 20:56:38 +00:00

isofs/cd9660

- Change all filesystems and vfs_cache to relock the dvp once the child is

2005-04-13 10:59:09 +00:00

kern

Do not allocate memory based on not-checked argument from userland.

2005-06-11 14:58:20 +00:00

libkern

Fix kiconv on the 64bit plathomes.

2005-05-24 15:38:08 +00:00

modules

Attach ng_tcpmss to the build.

2005-06-10 08:05:13 +00:00

net

Catch up with the struct ifnet changes and use if_alloc().

2005-06-10 23:52:01 +00:00

net80211

don't look at the wme ie in a beacon unless we negotiated use

2005-06-10 21:30:29 +00:00

netatalk

Stop embedding struct ifnet at the top of driver softcs. Instead the

2005-06-10 16:49:24 +00:00

netatm

Stop embedding struct ifnet at the top of driver softcs. Instead the

2005-06-10 16:49:24 +00:00

netgraph

Stop embedding struct ifnet at the top of driver softcs. Instead the

2005-06-10 16:49:24 +00:00

netinet

Stop embedding struct ifnet at the top of driver softcs. Instead the

2005-06-10 16:49:24 +00:00

netinet6

Stop embedding struct ifnet at the top of driver softcs. Instead the

2005-06-10 16:49:24 +00:00

netipsec

Correct typo in a comment describing vshiftl().

2005-06-02 23:56:10 +00:00

netipx

Stop embedding struct ifnet at the top of driver softcs. Instead the

2005-06-10 16:49:24 +00:00

netkey

…

netnatm

…

netncp

…

netsmb

lockmgr(...,LK_DRAIN,...) requires a balancing LK_RELEASE: recent

2005-05-13 11:27:48 +00:00

nfs

…

nfs4client

- We want if (mrep != NULL) not if (m_freem != NULL). m_freem will never

2005-04-25 05:11:19 +00:00

nfsclient

Fix a serious deadlock with the NFS client. Given a large enough

2005-06-10 23:50:41 +00:00

nfsserver

NFS write gathering defers execution of NFS server write requests to wait

2005-04-17 16:25:36 +00:00

opencrypto

malloc.h relies on param.h for a definition of MAXCPU. I guess that there is

2005-05-30 05:01:44 +00:00

pc98

Sync with syscons update (Add new member to struct sc_rndr_sw).

2005-05-29 11:53:14 +00:00

pccard

Change a directory layout for pc98.

2005-05-10 12:02:18 +00:00

pci

Move if_alloc() up so it's before mii_phy_probe().

2005-06-11 01:37:46 +00:00

posix4

Introduce MAC Framework and MAC Policy entry points to label and control

2005-05-04 10:39:15 +00:00

powerpc

Unbreak the PowerPC GENERIC build.

2005-06-11 10:59:02 +00:00

rpc

- Don't call rpcclnt_realign() if we don't have any mbufs to realign.

2005-03-19 01:16:25 +00:00

security

Correct grammar error in comment

2005-06-10 04:44:38 +00:00

sparc64

Turn on atkbdc(4), atkbd(4), creator(4), machfb(4), syscons(4), ohci(4),

2005-06-10 23:11:16 +00:00

sys

Do not allocate memory based on not-checked argument from userland.

2005-06-11 14:58:20 +00:00

tools

Allow EVFILT_VNODE events to work on every filesystem type, not just

2005-06-09 20:20:31 +00:00

ufs

Allow EVFILT_VNODE events to work on every filesystem type, not just

2005-06-09 20:20:31 +00:00

vm

The new contigmalloc(9) has a bad degenerate case where there were

2005-06-11 00:05:16 +00:00

Makefile

When building cscopnamefile, default architecture to ${MACHINE}, not i386.

2005-03-08 00:09:41 +00:00