Re: PR/42604 CVS commit: src/sys/dev/pci

[Pierre Pronchery <pierre.pronchery%duekin.com@localhost>]

                        Hello,

Tonnerre Lombard wrote:
> The following reply was made to PR kern/42604; it has been noted by GNATS.
> 
> Subject: PR/42604 CVS commit: src/sys/dev/pci
> Date: Wed, 20 Jan 2010 09:05:12 +0000
> 
>  Module Name: src
>  Committed By:        tonnerre
>  Date:                Wed Jan 20 09:05:12 UTC 2010
>  
>  Modified Files:
>       src/sys/dev/pci: azalia.c
>       src/sys/dev/pci/hdaudio: hdaudio_afg.c
>  
>  Log Message:
>  Signedness bug/crash in azalia and hdaudio. Fixes PR 42604.
>  By Pierre Pronchery.

I think it's worth a pull-up to NetBSD 5 as well. Could this be requested?

Once this is done, and with the subsequent stable release out maybe (eg
5.0.2 or 5.1), is there any plan to release an official advisory?

Would you mind if I do so, or otherwise publish technical details about
the flaw?

Best regards,
-- 
Pierre Pronchery, security consultant, DUEKIN Consulting
email: pierre.pronchery%duekin.com@localhost     Gubener Straße 40
PGP:   36F0 CA45 CA07 C871 8E31        10243 Berlin, Germany
       6FC4 6BBE DBA9 02A0 E77E        Web:   http://www.duekin.com/
Phone: +49 177 472 7481                Phone: +49 30 420 81 859
                                       Fax:   +49 30 420 81 861