drochner a1a04dd1be If a struct sigevent with SIGEV_SIGNAL is passed to timer_create(2),
check the signal number to be in the allowed range. An invalid
signal number could crash the kernel by overflowing the sigset_t
array.
More checks would be good, and SIGEV_THREAD shouldn't be dropped
silently, but this fixes at least the local DOS vulnerability.
2009-12-10 12:39:12 +00:00
2009-12-08 21:52:05 +00:00
2009-12-10 05:57:23 +00:00
2009-12-08 21:54:22 +00:00
2009-12-09 17:30:14 +00:00
2009-12-09 18:06:08 +00:00
2009-12-08 21:52:05 +00:00
Description
No description provided
3.1 GiB
Languages
C 85.3%
Roff 7.2%
Assembly 3.1%
Shell 1.7%
Makefile 1.2%
Other 0.9%