[Glibc-bsd-commits] r3065 - in trunk/kfreebsd-8/debian: . patches

[Aurelien Jarno]

Author: aurel32
Date: 2010-07-13 18:20:03 +0000 (Tue, 13 Jul 2010)
New Revision: 3065

Added:
   trunk/kfreebsd-8/debian/patches/000_mbuf.diff
Modified:
   trunk/kfreebsd-8/debian/changelog
   trunk/kfreebsd-8/debian/patches/series
Log:
  * Fix lost mbuf flag resulting in data corruption
    (FreeBSD-SA-10:07.mbuf / CVE-2010-2693).



Modified: trunk/kfreebsd-8/debian/changelog
===================================================================
--- trunk/kfreebsd-8/debian/changelog	2010-07-09 13:24:34 UTC (rev 3064)
+++ trunk/kfreebsd-8/debian/changelog	2010-07-13 18:20:03 UTC (rev 3065)
@@ -10,6 +10,13 @@
 
  -- Aurelien Jarno <aurel32 at debian.org>  Wed, 09 Jun 2010 14:31:53 +0200
 
+kfreebsd-8 (8.0-10) unstable; urgency=high
+
+  * Fix lost mbuf flag resulting in data corruption
+    (FreeBSD-SA-10:07.mbuf / CVE-2010-2693).
+
+ -- Aurelien Jarno <aurel32 at debian.org>  Tue, 13 Jul 2010 20:18:34 +0200
+
 kfreebsd-8 (8.0-9) unstable; urgency=low
 
   [ Aurelien Jarno ]

Added: trunk/kfreebsd-8/debian/patches/000_mbuf.diff
===================================================================
--- trunk/kfreebsd-8/debian/patches/000_mbuf.diff	                        (rev 0)
+++ trunk/kfreebsd-8/debian/patches/000_mbuf.diff	2010-07-13 18:20:03 UTC (rev 3065)
@@ -0,0 +1,10 @@
+--- a/sys/kern/uipc_mbuf.c
++++ b/sys/kern/uipc_mbuf.c
+@@ -302,6 +302,7 @@
+ 	n->m_ext.ref_cnt = m->m_ext.ref_cnt;
+ 	n->m_ext.ext_type = m->m_ext.ext_type;
+ 	n->m_flags |= M_EXT;
++	n->m_flags |= m->m_flags & M_RDONLY;
+ }
+ 
+ /*

Modified: trunk/kfreebsd-8/debian/patches/series
===================================================================
--- trunk/kfreebsd-8/debian/patches/series	2010-07-09 13:24:34 UTC (rev 3064)
+++ trunk/kfreebsd-8/debian/patches/series	2010-07-13 18:20:03 UTC (rev 3065)
@@ -1,3 +1,4 @@
+000_mbuf.diff
 001_misc.diff
 003_glibc_dev_aicasm.diff
 004_xargs.diff