CVS commit: [netbsd-5-0] src/sys/kern

[Soren Jacobsen <snj%netbsd.org@localhost>]

Module Name:    src
Committed By:   snj
Date:           Thu Dec 10 23:12:18 UTC 2009

Modified Files:
        src/sys/kern [netbsd-5-0]: kern_time.c

Log Message:
Pull up following revision(s) (requested by drochner in ticket #1189):
        sys/kern/kern_time.c: revision 1.163
If a struct sigevent with SIGEV_SIGNAL is passed to timer_create(2),
check the signal number to be in the allowed range. An invalid
signal number could crash the kernel by overflowing the sigset_t
array.
More checks would be good, and SIGEV_THREAD shouldn't be dropped
silently, but this fixes at least the local DOS vulnerability.


To generate a diff of this commit:
cvs rdiff -u -r1.155.4.2 -r1.155.4.2.2.1 src/sys/kern/kern_time.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.