diff options
| author | Edward Tomasz Napierala <trasz@FreeBSD.org> | 2017-01-04 14:43:57 +0000 |
|---|---|---|
| committer | Edward Tomasz Napierala <trasz@FreeBSD.org> | 2017-01-04 14:43:57 +0000 |
| commit | 5ec7cde488fbd7fedf9f1b11bbdceb63d47c6ad4 (patch) | |
| tree | 68a5ab2b176db7040ae7fb99e62aad00dd372b47 /lib/libz | |
| parent | 3a408ce90d983429499243a6087f8bd149977548 (diff) | |
| download | src-5ec7cde488fbd7fedf9f1b11bbdceb63d47c6ad4.tar.gz src-5ec7cde488fbd7fedf9f1b11bbdceb63d47c6ad4.zip | |
Fix bug that would result in a kernel crash in some cases involving
a symlink and an autofs mount request. The crash was caused by namei()
calling bcopy() with a negative length, caused by numeric underflow:
in lookup(), in the relookup path, the ni_pathlen was decremented too
many times. The bug was introduced in r296715.
Big thanks to Alex Deiter for his help with debugging this.
Reviewed by: kib@
Tested by: Alex Deiter <alex.deiter at gmail.com>
MFC after: 1 month
Notes
Notes:
svn path=/head/; revision=311284
Diffstat (limited to 'lib/libz')
0 files changed, 0 insertions, 0 deletions