Page MenuHomeFreeBSD

D49674.id153243.diff
No OneTemporary

D49674.id153243.diff

diff --git a/sys/kern/vfs_syscalls.c b/sys/kern/vfs_syscalls.c
--- a/sys/kern/vfs_syscalls.c
+++ b/sys/kern/vfs_syscalls.c
@@ -5075,6 +5075,15 @@
if (len == 0)
goto out;
+ /*
+ * Make sure that the ranges we check and lock below are valid. Note
+ * that len is clamped to SSIZE_MAX above.
+ */
+ if (inoff < 0 || outoff < 0) {
+ error = EINVAL;
+ goto out;
+ }
+
/*
* If infp and outfp refer to the same file, the byte ranges cannot
* overlap.

File Metadata

Mime Type
text/plain
Expires
Fri, Aug 7, 2:35 PM (13 h, 58 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
36182699
Default Alt Text
D49674.id153243.diff (466 B)

Event Timeline