cvs commit: src/sys/compat/svr4 svr4_stream.c

[David Schultz]

das         2005-03-23 08:28:06 UTC

  FreeBSD src repository

  Modified files:
    sys/compat/svr4      svr4_stream.c 
  Log:
  Bounds check the user-supplied length used in a copyout() in
  svr4_do_getmsg().  In principle this bug could disclose data from
  kernel memory, but in practice, the SVR4 emulation layer is probably
  not functional enough to cause the relevant code path to be executed.
  In any case, the emulator has been disconnected from the build since
  5.0-RELEASE.
  
  Found by:       Coverity Prevent analysis tool
  
  Revision  Changes    Path
  1.53      +2 -0      src/sys/compat/svr4/svr4_stream.c