[src/netbsd-6]: src/doc ticket 1051

[bouyer <bouyer%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/135435474185
branches:  netbsd-6
changeset: 776613:135435474185
user:      bouyer <bouyer%NetBSD.org@localhost>
date:      Mon Apr 21 21:04:21 2014 +0000

description:
ticket 1051

diffstat:

 doc/CHANGES-6.2 |  11 ++++++++++-
 1 files changed, 10 insertions(+), 1 deletions(-)

diffs (22 lines):

diff -r 61e25d512f99 -r 135435474185 doc/CHANGES-6.2
--- a/doc/CHANGES-6.2   Mon Apr 21 21:03:38 2014 +0000
+++ b/doc/CHANGES-6.2   Mon Apr 21 21:04:21 2014 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-6.2,v 1.1.2.105 2014/04/21 10:18:34 bouyer Exp $
+# $NetBSD: CHANGES-6.2,v 1.1.2.106 2014/04/21 21:04:21 bouyer Exp $
 
 A complete list of changes from the 6.1 release until the 6.2 release:
 
@@ -2176,3 +2176,12 @@
        by a local user to panic the system.
        [maxv, ticket #1050]
 
+sys/compat/linux/common/linux_exec_elf32.c     1.91 via patch
+
+       A specially-crafted linux binary could easily control a kernel array
+       index.
+       Add some checks to ensure that nothing will be read outside the
+       allocated area.
+       Rewrite the code so that we don't need to allocate the whole section.
+       [maxv, ticket #1051]
+