CVS commit: src/sys/kern

[Matthias Drochner <drochner%netbsd.org@localhost>]

Module Name:    src
Committed By:   drochner
Date:           Thu Dec 10 12:39:12 UTC 2009

Modified Files:
        src/sys/kern: kern_time.c

Log Message:
If a struct sigevent with SIGEV_SIGNAL is passed to timer_create(2),
check the signal number to be in the allowed range. An invalid
signal number could crash the kernel by overflowing the sigset_t
array.
More checks would be good, and SIGEV_THREAD shouldn't be dropped
silently, but this fixes at least the local DOS vulnerability.


To generate a diff of this commit:
cvs rdiff -u -r1.162 -r1.163 src/sys/kern/kern_time.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.