[Glibc-bsd-commits] r5942 - in branches/jessie/kfreebsd-10/debian: . patches

[stevenc-guest at alioth.debian.org]

Author: stevenc-guest
Date: 2016-03-16 23:28:09 +0000 (Wed, 16 Mar 2016)
New Revision: 5942

Added:
   branches/jessie/kfreebsd-10/debian/patches/SA-16_15.sysarch.patch
Modified:
   branches/jessie/kfreebsd-10/debian/changelog
   branches/jessie/kfreebsd-10/debian/patches/series
Log:
Pick SVN r296954 from FreeBSD 10.1-RELEASE:
- SA-16:15: Fix incorrect argument validation in sysarch(2).
  (CVE-2016-1885) (Closes: #818426)


Modified: branches/jessie/kfreebsd-10/debian/changelog
===================================================================
--- branches/jessie/kfreebsd-10/debian/changelog	2016-03-16 23:24:21 UTC (rev 5941)
+++ branches/jessie/kfreebsd-10/debian/changelog	2016-03-16 23:28:09 UTC (rev 5942)
@@ -1,8 +1,12 @@
 kfreebsd-10 (10.1~svn274115-4+kbsd8u3) UNRELEASED; urgency=high
 
+  [ Steven Chamberlain ]
   * Pick SVN r294904 from FreeBSD 10.1-RELEASE:
     - SA-16:10: Fix Linux compatibility layer issetugid(2) system call
       vulnerability. (CVE-2016-1883) (Closes: #818423)
+  * Pick SVN r296954 from FreeBSD 10.1-RELEASE:
+    - SA-16:15: Fix incorrect argument validation in sysarch(2).
+      (CVE-2016-1885) (Closes: #818426)
 
  -- Steven Chamberlain <steven at pyro.eu.org>  Wed, 16 Mar 2016 23:16:33 +0000
 

Added: branches/jessie/kfreebsd-10/debian/patches/SA-16_15.sysarch.patch
===================================================================
--- branches/jessie/kfreebsd-10/debian/patches/SA-16_15.sysarch.patch	                        (rev 0)
+++ branches/jessie/kfreebsd-10/debian/patches/SA-16_15.sysarch.patch	2016-03-16 23:28:09 UTC (rev 5942)
@@ -0,0 +1,19 @@
+Description:
+ Fix incorrect argument validation in sysarch(2). [SA-16:15]
+Origin: vendor
+Bug: https://www.freebsd.org/security/advisories/FreeBSD-SA-16:15.sysarch.asc
+Applied-Upstream: https://svnweb.freebsd.org/base?view=revision&revision=296954
+
+--- a/sys/amd64/amd64/sys_machdep.c
++++ b/sys/amd64/amd64/sys_machdep.c
+@@ -591,8 +591,8 @@
+ 	struct i386_ldt_args *uap;
+ 	struct user_segment_descriptor *descs;
+ {
+-	int error = 0, i;
+-	int largest_ld;
++	int error = 0;
++	unsigned int largest_ld, i;
+ 	struct mdproc *mdp = &td->td_proc->p_md;
+ 	struct proc_ldt *pldt;
+ 	struct user_segment_descriptor *dp;

Modified: branches/jessie/kfreebsd-10/debian/patches/series
===================================================================
--- branches/jessie/kfreebsd-10/debian/patches/series	2016-03-16 23:24:21 UTC (rev 5941)
+++ branches/jessie/kfreebsd-10/debian/patches/series	2016-03-16 23:28:09 UTC (rev 5942)
@@ -54,3 +54,4 @@
 SA-16_04.linux.patch
 SA-16_05.tcp.patch
 SA-16_10.linux.patch
+SA-16_15.sysarch.patch