TIOCGSID can dereference a freed t_session, because we are storing s_leader
in the wrong place. This is a cold hard crash crashes. Some folk are
looking at fixing this properly but it will take some time, so in the meantime
we should just fail the ioctl.
from deraadt@; from Acts1632, OK kettenis@
this is errata/7.9/013_ttyioctl.patch.sig
TIOCGSID can dereference a freed t_session, because we are storing s_leader
in the wrong place. This is a cold hard crash crashes. Some folk are
looking at fixing this properly but it will take some time, so in the meantime
we should just fail the ioctl.
from deraadt@; from Acts1632, OK kettenis@
this is errata/7.8/049_ttyioctl.patch.sig
sysctl_proc_args() did not check if uvm_io() returned no data, which
could result in uninitialised memory being returned. Rather than callers
of uvm_io() having to carefully check for this condition, treat it as an
error.
from dgl@; OK kettenis@; initial report from Acts1631
this is errata/7.9/012_kernproc.patch.sig
sysctl_proc_args() did not check if uvm_io() returned no data, which
could result in uninitialised memory being returned. Rather than callers
of uvm_io() having to carefully check for this condition, treat it as an
error.
from dgl@; OK kettenis@; initial report from Acts1631
this is errata/7.8/048_kernproc.patch.sig
TIOCGSID can dereference a freed t_session, because we are storing s_leader
in the wrong place. This is a cold hard crash crashes. Some folk are
looking at fixing this properly but it will take some time, so in the meantime
we should just fail the ioctl.
from deraadt@; from Acts1632; OK kettenis@
this is errata/7.9/010_ifioctl.patch.sig
TIOCGSID can dereference a freed t_session, because we are storing s_leader
in the wrong place. This is a cold hard crash crashes. Some folk are
looking at fixing this properly but it will take some time, so in the meantime
we should just fail the ioctl.
from deraadt@; from Acts1632; OK kettenis@
x11/qt6/qtshadertools: fix build with libcxx22, ok rsadowski (maintainer)
Building doc.cc with -O2 gobbles up all the memory and ends with
"LLVM ERROR: out of memory". That's probably a compiler bug.
Force -O1 on that file as a workaround.
sysctl_proc_args() did not check if uvm_io() returned no data, which
could result in uninitialised memory being returned. Rather than callers
of uvm_io() having to carefully check for this condition, treat it as an
error.
ok kettenis; initial report from Acts1631