CVS commit: [netbsd-5-1] src/sys

["Stephen Borrill" <sborrill%netbsd.org@localhost>]

Module Name:    src
Committed By:   sborrill
Date:           Mon Apr 28 16:03:16 UTC 2014

Modified Files:
        src/sys/coda [netbsd-5-1]: coda_vfsops.c
        src/sys/fs/adosfs [netbsd-5-1]: advfsops.c
        src/sys/fs/cd9660 [netbsd-5-1]: cd9660_vfsops.c
        src/sys/fs/efs [netbsd-5-1]: efs_vfsops.c
        src/sys/fs/filecorefs [netbsd-5-1]: filecore_vfsops.c
        src/sys/fs/hfs [netbsd-5-1]: hfs_vfsops.c
        src/sys/fs/msdosfs [netbsd-5-1]: msdosfs_vfsops.c
        src/sys/fs/ntfs [netbsd-5-1]: ntfs_vfsops.c
        src/sys/fs/ptyfs [netbsd-5-1]: ptyfs_vfsops.c
        src/sys/fs/puffs [netbsd-5-1]: puffs_vfsops.c
        src/sys/fs/smbfs [netbsd-5-1]: smbfs_vfsops.c
        src/sys/fs/sysvbfs [netbsd-5-1]: sysvbfs_vfsops.c
        src/sys/fs/tmpfs [netbsd-5-1]: tmpfs_vfsops.c
        src/sys/fs/udf [netbsd-5-1]: udf_vfsops.c
        src/sys/fs/union [netbsd-5-1]: union_vfsops.c
        src/sys/fs/unionfs [netbsd-5-1]: unionfs_vfsops.c
        src/sys/kern [netbsd-5-1]: vfs_syscalls.c
        src/sys/miscfs/nullfs [netbsd-5-1]: null_vfsops.c
        src/sys/miscfs/overlay [netbsd-5-1]: overlay_vfsops.c
        src/sys/miscfs/procfs [netbsd-5-1]: procfs_vfsops.c
        src/sys/miscfs/umapfs [netbsd-5-1]: umap_vfsops.c
        src/sys/nfs [netbsd-5-1]: nfs_vfsops.c
        src/sys/ufs/ext2fs [netbsd-5-1]: ext2fs_vfsops.c
        src/sys/ufs/ffs [netbsd-5-1]: ffs_vfsops.c
        src/sys/ufs/lfs [netbsd-5-1]: lfs_vfsops.c
        src/sys/ufs/mfs [netbsd-5-1]: mfs_vfsops.c

Log Message:
Pull up the following revisions(s) (requested by maxv in ticket #1901):
        sys/kern/vfs_syscalls.c:        revision 1.478, 1.480 via patch
        sys/coda/coda_vfsops.c:         revision 1.81
        sys/fs/adosfs/advfsops.c:       revision 1.70
        sys/fs/cd9660/cd9660_vfsops.c:  revision 1.84
        sys/fs/efs/efs_vfsops.c:        revision 1.25
        sys/fs/filecorefs/filecore_vfsops.c:    revision 1.76
        sys/fs/hfs/hfs_vfsops.c:        revision 1.31
        sys/fs/msdosfs/msdosfs_vfsops.c:        revision 1.107
        sys/fs/ntfs/ntfs_vfsops.c:      revision 1.94
        sys/fs/ptyfs/ptyfs_vfsops.c:    revision 1.50 via patch
        sys/fs/puffs/puffs_vfsops.c:    revision 1.110 via patch
        sys/fs/smbfs/smbfs_vfsops.c:    revision 1.100
        sys/fs/sysvbfs/sysvbfs_vfsops.c:        revision 1.43
        sys/fs/tmpfs/tmpfs_vfsops.c:    revision 1.59 via patch
        sys/fs/udf/udf_vfsops.c:        revision 1.67
        sys/fs/union/union_vfsops.c:    revision 1.72
        sys/fs/unionfs/unionfs_vfsops.c:        revision 1.13
        sys/kern/vfs_syscalls.c:        revision 1.479
        sys/miscfs/nullfs/null_vfsops.c:        revision 1.88 via patch
        sys/miscfs/overlay/overlay_vfsops.c:    revision 1.61
        sys/miscfs/procfs/procfs_vfsops.c:      revision 1.91
        sys/miscfs/umapfs/umap_vfsops.c:        revision 1.92
        sys/nfs/nfs_vfsops.c:           revision 1.227
        sys/ufs/ext2fs/ext2fs_vfsops.c: revision 1.180
        sys/ufs/ffs/ffs_vfsops.c:       revision 1.297
        sys/ufs/lfs/lfs_vfsops.c:       revision 1.321
        sys/ufs/mfs/mfs_vfsops.c:       revision 1.107

Due to missing checks in the mount syscall, and a wrong assumption on the
file systems side, the kernel could allocate an unbounded or zero-sized
memory buffer, and could dereference a NULL pointer when particular
arguments are given by a user.


To generate a diff of this commit:
cvs rdiff -u -r1.66 -r1.66.18.1 src/sys/coda/coda_vfsops.c
cvs rdiff -u -r1.53 -r1.53.16.1 src/sys/fs/adosfs/advfsops.c
cvs rdiff -u -r1.63.6.1 -r1.63.6.1.2.1 src/sys/fs/cd9660/cd9660_vfsops.c
cvs rdiff -u -r1.16.4.1 -r1.16.4.1.6.1 src/sys/fs/efs/efs_vfsops.c
cvs rdiff -u -r1.55 -r1.55.16.1 src/sys/fs/filecorefs/filecore_vfsops.c
cvs rdiff -u -r1.19 -r1.19.12.1 src/sys/fs/hfs/hfs_vfsops.c
cvs rdiff -u -r1.68.6.2 -r1.68.6.2.6.1 src/sys/fs/msdosfs/msdosfs_vfsops.c
cvs rdiff -u -r1.72.6.1 -r1.72.6.1.2.1 src/sys/fs/ntfs/ntfs_vfsops.c
cvs rdiff -u -r1.37 -r1.37.14.1 src/sys/fs/ptyfs/ptyfs_vfsops.c
cvs rdiff -u -r1.81.8.1 -r1.81.8.1.2.1 src/sys/fs/puffs/puffs_vfsops.c
cvs rdiff -u -r1.85.4.1 -r1.85.4.1.2.1 src/sys/fs/smbfs/smbfs_vfsops.c
cvs rdiff -u -r1.26 -r1.26.14.1 src/sys/fs/sysvbfs/sysvbfs_vfsops.c
cvs rdiff -u -r1.44 -r1.44.18.1 src/sys/fs/tmpfs/tmpfs_vfsops.c
cvs rdiff -u -r1.52.2.3 -r1.52.2.3.2.1 src/sys/fs/udf/udf_vfsops.c
cvs rdiff -u -r1.57.6.1 -r1.57.6.1.6.1 src/sys/fs/union/union_vfsops.c
cvs rdiff -u -r1.5 -r1.5.12.1 src/sys/fs/unionfs/unionfs_vfsops.c
cvs rdiff -u -r1.376.4.5.2.1 -r1.376.4.5.2.2 src/sys/kern/vfs_syscalls.c
cvs rdiff -u -r1.77 -r1.77.12.1 src/sys/miscfs/nullfs/null_vfsops.c
cvs rdiff -u -r1.53 -r1.53.12.1 src/sys/miscfs/overlay/overlay_vfsops.c
cvs rdiff -u -r1.81 -r1.81.16.1 src/sys/miscfs/procfs/procfs_vfsops.c
cvs rdiff -u -r1.80 -r1.80.12.1 src/sys/miscfs/umapfs/umap_vfsops.c
cvs rdiff -u -r1.203 -r1.203.10.1 src/sys/nfs/nfs_vfsops.c
cvs rdiff -u -r1.137.6.5 -r1.137.6.5.2.1 src/sys/ufs/ext2fs/ext2fs_vfsops.c
cvs rdiff -u -r1.239.2.4 -r1.239.2.4.2.1 src/sys/ufs/ffs/ffs_vfsops.c
cvs rdiff -u -r1.267.6.1 -r1.267.6.1.6.1 src/sys/ufs/lfs/lfs_vfsops.c
cvs rdiff -u -r1.98 -r1.98.12.1 src/sys/ufs/mfs/mfs_vfsops.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.