[Glibc-bsd-commits] r4374 - in trunk/kfreebsd-8/debian: . patches

[Christoph Egger]

Author: christoph
Date: 2012-11-23 22:15:14 +0000 (Fri, 23 Nov 2012)
New Revision: 4374

Added:
   trunk/kfreebsd-8/debian/patches/SA-12_08.linux.patch
Modified:
   trunk/kfreebsd-8/debian/changelog
   trunk/kfreebsd-8/debian/patches/series
Log:
Apply patch for SA-12:08 / CVE-2012-4576:
memory access without proper validation in linux compat system
(Closes: #694096)

Modified: trunk/kfreebsd-8/debian/changelog
===================================================================
--- trunk/kfreebsd-8/debian/changelog	2012-11-23 22:04:46 UTC (rev 4373)
+++ trunk/kfreebsd-8/debian/changelog	2012-11-23 22:15:14 UTC (rev 4374)
@@ -1,3 +1,11 @@
+kfreebsd-8 (8.3-6) unstable; urgency=medium
+
+  * Apply patch for SA-12:08 / CVE-2012-4576:
+    memory access without proper validation in linux compat system
+    (Closes: #694096)
+
+ -- Christoph Egger <christoph at debian.org>  Fri, 23 Nov 2012 14:10:40 -0800
+
 kfreebsd-8 (8.3-5) unstable; urgency=medium
 
   [ Robert Millan ]

Added: trunk/kfreebsd-8/debian/patches/SA-12_08.linux.patch
===================================================================
--- trunk/kfreebsd-8/debian/patches/SA-12_08.linux.patch	                        (rev 0)
+++ trunk/kfreebsd-8/debian/patches/SA-12_08.linux.patch	2012-11-23 22:15:14 UTC (rev 4374)
@@ -0,0 +1,16 @@
+Index: sys/compat/linux/linux_ioctl.c
+===================================================================
+--- a/sys/compat/linux/linux_ioctl.c	(revision 242578)
++++ b/sys/compat/linux/linux_ioctl.c	(working copy)
+@@ -2260,8 +2260,9 @@ again:
+ 
+ 	ifc.ifc_len = valid_len; 
+ 	sbuf_finish(sb);
+-	memcpy(PTRIN(ifc.ifc_buf), sbuf_data(sb), ifc.ifc_len);
+-	error = copyout(&ifc, uifc, sizeof(ifc));
++	error = copyout(sbuf_data(sb), PTRIN(ifc.ifc_buf), ifc.ifc_len);
++	if (error == 0)
++		error = copyout(&ifc, uifc, sizeof(ifc));
+ 	sbuf_delete(sb);
+ 	CURVNET_RESTORE();
+ 

Modified: trunk/kfreebsd-8/debian/patches/series
===================================================================
--- trunk/kfreebsd-8/debian/patches/series	2012-11-23 22:04:46 UTC (rev 4373)
+++ trunk/kfreebsd-8/debian/patches/series	2012-11-23 22:15:14 UTC (rev 4374)
@@ -12,6 +12,7 @@
 SA-12_04.sysret.patch
 EN-12_02.ipv6refcount.patch
 SCTP_DOS_svn239447.diff
+SA-12_08.linux.patch
 
 # Other patches that might or might not be mergeable
 001_misc.diff