Page MenuHomeFreeBSD

D49674.id.diff
No OneTemporary

D49674.id.diff

diff --git a/sys/kern/vfs_syscalls.c b/sys/kern/vfs_syscalls.c
--- a/sys/kern/vfs_syscalls.c
+++ b/sys/kern/vfs_syscalls.c
@@ -5075,6 +5075,15 @@
if (len == 0)
goto out;
+ /*
+ * Make sure that the ranges we check and lock below are valid. Note
+ * that len is clamped to SSIZE_MAX above.
+ */
+ if (inoff < 0 || outoff < 0) {
+ error = EINVAL;
+ goto out;
+ }
+
/*
* If infp and outfp refer to the same file, the byte ranges cannot
* overlap.

File Metadata

Mime Type
text/plain
Expires
Tue, Apr 7, 11:00 PM (5 h, 47 s)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
31053797
Default Alt Text
D49674.id.diff (466 B)

Event Timeline