[Glibc-bsd-commits] r3067 - in trunk/kfreebsd-7/debian: . patches

[Aurelien Jarno]

Author: aurel32
Date: 2010-07-13 18:23:15 +0000 (Tue, 13 Jul 2010)
New Revision: 3067

Added:
   trunk/kfreebsd-7/debian/patches/000_mbuf.diff
Modified:
   trunk/kfreebsd-7/debian/changelog
   trunk/kfreebsd-7/debian/patches/series
Log:
  * Fix lost mbuf flag resulting in data corruption
    (FreeBSD-SA-10:07.mbuf / CVE-2010-2693).




Modified: trunk/kfreebsd-7/debian/changelog
===================================================================
--- trunk/kfreebsd-7/debian/changelog	2010-07-13 18:21:36 UTC (rev 3066)
+++ trunk/kfreebsd-7/debian/changelog	2010-07-13 18:23:15 UTC (rev 3067)
@@ -1,10 +1,15 @@
 kfreebsd-7 (7.3-5) UNRELEASED; urgency=low
 
+  [ Guillem Jover ]
   * Use kfreebsd-any instead of explicit architecture list.
   * Fold Build-Depends field into several lines.
 
- -- Guillem Jover <guillem at debian.org>  Mon, 28 Jun 2010 21:22:22 +0200
+  [ Aurelien Jarno ]
+  * Fix lost mbuf flag resulting in data corruption
+    (FreeBSD-SA-10:07.mbuf / CVE-2010-2693).
 
+ -- Aurelien Jarno <aurel32 at debian.org>  Tue, 13 Jul 2010 20:22:54 +0200
+
 kfreebsd-7 (7.3-4) unstable; urgency=low
 
   [ Aurelien Jarno ]

Added: trunk/kfreebsd-7/debian/patches/000_mbuf.diff
===================================================================
--- trunk/kfreebsd-7/debian/patches/000_mbuf.diff	                        (rev 0)
+++ trunk/kfreebsd-7/debian/patches/000_mbuf.diff	2010-07-13 18:23:15 UTC (rev 3067)
@@ -0,0 +1,10 @@
+--- a/sys/kern/uipc_mbuf.c
++++ b/sys/kern/uipc_mbuf.c
+@@ -302,6 +302,7 @@
+ 	n->m_ext.ref_cnt = m->m_ext.ref_cnt;
+ 	n->m_ext.ext_type = m->m_ext.ext_type;
+ 	n->m_flags |= M_EXT;
++	n->m_flags |= m->m_flags & M_RDONLY;
+ }
+ 
+ /*

Modified: trunk/kfreebsd-7/debian/patches/series
===================================================================
--- trunk/kfreebsd-7/debian/patches/series	2010-07-13 18:21:36 UTC (rev 3066)
+++ trunk/kfreebsd-7/debian/patches/series	2010-07-13 18:23:15 UTC (rev 3067)
@@ -1,3 +1,4 @@
+000_mbuf.diff
 000_nfsclient.diff
 001_misc.diff
 003_glibc_dev_aicasm.diff