[src/netbsd-6-0]: src/doc ticket 1051

[bouyer <bouyer%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/b0a1e142a59d
branches:  netbsd-6-0
changeset: 774939:b0a1e142a59d
user:      bouyer <bouyer%NetBSD.org@localhost>
date:      Mon Apr 21 21:04:27 2014 +0000

description:
ticket 1051

diffstat:

 doc/CHANGES-6.0.6 |  11 ++++++++++-
 1 files changed, 10 insertions(+), 1 deletions(-)

diffs (22 lines):

diff -r 4a1fdaf8a17a -r b0a1e142a59d doc/CHANGES-6.0.6
--- a/doc/CHANGES-6.0.6 Mon Apr 21 21:03:45 2014 +0000
+++ b/doc/CHANGES-6.0.6 Mon Apr 21 21:04:27 2014 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-6.0.6,v 1.1.2.3 2014/04/21 10:18:29 bouyer Exp $
+# $NetBSD: CHANGES-6.0.6,v 1.1.2.4 2014/04/21 21:04:27 bouyer Exp $
 
 A complete list of changes from the NetBSD 6.0.5 release to the NetBSD 6.0.6
 release:
@@ -64,3 +64,12 @@
        by a local user to panic the system.
        [maxv, ticket #1050]
 
+sys/compat/linux/common/linux_exec_elf32.c     1.91 via patch
+
+       A specially-crafted linux binary could easily control a kernel array
+       index.
+       Add some checks to ensure that nothing will be read outside the
+       allocated area.
+       Rewrite the code so that we don't need to allocate the whole section.
+       [maxv, ticket #1051]
+