d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
d46957d5ba
freebsd-skq/sys
History
cel d46957d5ba Add better sanity checking to the logic that handles ioctl processing 
for nfsclient and nfs4client in order to prevent local root users
from panicing the system.

PR:		kern/77463
Submitted by:	Wojciech A. Koszek
Reviewed by:	cel, rees
MFC after:	2 weeks
Security:	Local root users can panic the system at will
2006-05-13 00:16:35 +00:00
..
amd64 Clean out sysctl machdep.* related defines. 2006-05-11 17:29:25 +00:00
arm Clean out sysctl machdep.* related defines. 2006-05-11 17:29:25 +00:00
boot Remove more Alpha bits from the boot code including fixing several 2006-05-12 04:09:53 +00:00
bsm Update src/sys/bsm for OpenBSM 1.0 alpha 5 changes: 2006-03-04 16:54:21 +00:00
cam Actually check to see if XPT_CALC_GEOMETRY had an error 2006-04-18 22:01:59 +00:00
coda CODA_COMPAT_5 may not be defined unconditionally in the coda5 module. 2006-02-27 12:04:13 +00:00
compat Remove various bits of conditional Alpha code and fixup a few comments. 2006-05-12 05:04:46 +00:00
conf Remove ip6fw. Since ipfw has full functional IPv6 support now and - in 2006-05-12 20:39:23 +00:00
contrib Put debugging messages related to inconsistent ticket numbers under misc and 2006-05-12 16:15:34 +00:00
crypto padlock(4) doesn't support explicitly provided keys yet. 2006-04-20 06:31:44 +00:00
ddb Use __LP64__ rather than the PTR64 hack. 2006-05-11 21:59:55 +00:00
dev o A divisor of 0 is perfectly valid. Reserve -1 for an invalid 2006-05-12 23:24:45 +00:00
doc
fs Remove unused prototypes. 2006-04-12 12:17:29 +00:00
gdb add support for copying console messages to a remote gdb 2006-03-23 23:06:14 +00:00
geom Use G_RAID3_FOREACH_SAFE_BIO() macro instead of G_RAID3_FOREACH_BIO() in 2006-05-04 13:01:16 +00:00
gnu Check for VFS_STATFS() failure in _xfs_mount() and abort the mount 2006-05-05 18:41:56 +00:00
i4b Fix -Wundef warnings found when compiling i386 LINT, GENERIC and 2005-12-05 11:58:35 +00:00
i386 Test commit after repoman upgrade. Remove one of my many email addresses 2006-05-12 22:41:58 +00:00
ia64 Fix braino in previous commit: Don't redefine OID_AUTO to something 2006-05-11 22:49:31 +00:00
isa Remove various bits of conditional Alpha code and fixup a few comments. 2006-05-12 05:04:46 +00:00
isofs/cd9660 When encountering a ISO_SUSP_CFLAG_ROOT element in Rock Ridge 2006-03-13 22:32:33 +00:00
kern Remove various bits of conditional Alpha code and fixup a few comments. 2006-05-12 05:04:46 +00:00
libkern First pass at removing Alpha kernel support. 2006-05-11 22:25:28 +00:00
modules Remove ip6fw. Since ipfw has full functional IPv6 support now and - in 2006-05-12 20:39:23 +00:00
net Remove ip6fw. Since ipfw has full functional IPv6 support now and - in 2006-05-12 20:39:23 +00:00
net80211 Ensure outbound data packets in hostap mode are delivered only to 2006-04-28 19:06:15 +00:00
netatalk White space consistency with kasserts. Minor style tweaks. 2006-04-01 16:54:37 +00:00
netatm Chance protocol switch method pru_detach() so that it returns void 2006-04-01 15:42:02 +00:00
netgraph o Replace disappeared URLs to Cisco docs by new ones, style. 2006-04-25 20:01:50 +00:00
netinet Remove ip6fw. Since ipfw has full functional IPv6 support now and - in 2006-05-12 20:39:23 +00:00
netinet6 Remove ip6fw. Since ipfw has full functional IPv6 support now and - in 2006-05-12 20:39:23 +00:00
netipsec Hide net.inet.ipsec.test_{replay,integrity} sysctls under #ifdef REGRESSION. 2006-04-10 15:04:36 +00:00
netipx Make this compile without INVARIANTS. 2006-04-11 23:15:47 +00:00
netkey In raw and raw-derived socket types, maintain and enforce invariant that 2006-04-01 15:55:44 +00:00
netnatm style(9) treatment following fixups. 2006-04-23 16:33:56 +00:00
netncp In ncp_sysctl_connstat(), the SLIST_FOREACH() logic to check 'error' 2006-01-14 11:40:32 +00:00
netsmb Retire NETSMBCRYPTO as a kernel option and make its functionality 2006-03-05 22:52:17 +00:00
nfs
nfs4client Add better sanity checking to the logic that handles ioctl processing 2006-05-13 00:16:35 +00:00
nfsclient Fix a snafu caused while patching the previous fix from another branch. 2006-05-05 18:12:13 +00:00
nfsserver Bump up the NFS server dupreq cache limit to 2K (from 64). With a small 2006-04-25 00:21:56 +00:00
opencrypto Be sure to wakeup the crypto thread when new request was queued. 2006-04-11 18:01:04 +00:00
pc98 Clean out sysctl machdep.* related defines. 2006-05-11 17:29:25 +00:00
pccard I don't believe these are used at all, and can be safely removed 2006-01-15 06:49:28 +00:00
pci Remove various bits of conditional Alpha code and fixup a few comments. 2006-05-12 05:04:46 +00:00
posix4 Use proc lock to prevent a thread from exiting, Giant was no longer used to 2006-04-10 04:55:59 +00:00
powerpc Remove straggling reference to CPU_ macros 2006-05-11 17:51:10 +00:00
rpc Fix up some cut-n-paste damage and some out-of-date comments. 2006-01-20 15:20:41 +00:00
security Reconstitute struct mac_policy_ops by breaking out individual function 2006-04-26 14:18:55 +00:00
sparc64 Clean out sysctl machdep.* related defines. 2006-05-11 17:29:25 +00:00
sys drop D_MEMDISK, not used in the tree... 2006-05-12 19:40:54 +00:00
tools Fix a leftover "iwi_boot" string. 2006-01-30 16:32:08 +00:00
ufs Bring the call to softdep_releasefile() within the region protected by 2006-05-09 22:33:43 +00:00
vm Use better order here. 2006-05-10 06:50:44 +00:00
Makefile Reimplementation of world/kernel build options. For details, see: 2006-03-17 18:54:44 +00:00