CVS commit: [netbsd-5-2] src/sys

["Stephen Borrill" <sborrill%netbsd.org@localhost>]

Module Name:    src
Committed By:   sborrill
Date:           Mon Apr 28 16:05:37 UTC 2014

Modified Files:
        src/sys/coda [netbsd-5-2]: coda_vfsops.c
        src/sys/fs/adosfs [netbsd-5-2]: advfsops.c
        src/sys/fs/cd9660 [netbsd-5-2]: cd9660_vfsops.c
        src/sys/fs/efs [netbsd-5-2]: efs_vfsops.c
        src/sys/fs/filecorefs [netbsd-5-2]: filecore_vfsops.c
        src/sys/fs/hfs [netbsd-5-2]: hfs_vfsops.c
        src/sys/fs/msdosfs [netbsd-5-2]: msdosfs_vfsops.c
        src/sys/fs/ntfs [netbsd-5-2]: ntfs_vfsops.c
        src/sys/fs/ptyfs [netbsd-5-2]: ptyfs_vfsops.c
        src/sys/fs/puffs [netbsd-5-2]: puffs_vfsops.c
        src/sys/fs/smbfs [netbsd-5-2]: smbfs_vfsops.c
        src/sys/fs/sysvbfs [netbsd-5-2]: sysvbfs_vfsops.c
        src/sys/fs/tmpfs [netbsd-5-2]: tmpfs_vfsops.c
        src/sys/fs/udf [netbsd-5-2]: udf_vfsops.c
        src/sys/fs/union [netbsd-5-2]: union_vfsops.c
        src/sys/fs/unionfs [netbsd-5-2]: unionfs_vfsops.c
        src/sys/kern [netbsd-5-2]: vfs_syscalls.c
        src/sys/miscfs/nullfs [netbsd-5-2]: null_vfsops.c
        src/sys/miscfs/overlay [netbsd-5-2]: overlay_vfsops.c
        src/sys/miscfs/procfs [netbsd-5-2]: procfs_vfsops.c
        src/sys/miscfs/umapfs [netbsd-5-2]: umap_vfsops.c
        src/sys/nfs [netbsd-5-2]: nfs_vfsops.c
        src/sys/ufs/ext2fs [netbsd-5-2]: ext2fs_vfsops.c
        src/sys/ufs/ffs [netbsd-5-2]: ffs_vfsops.c
        src/sys/ufs/lfs [netbsd-5-2]: lfs_vfsops.c
        src/sys/ufs/mfs [netbsd-5-2]: mfs_vfsops.c

Log Message:
Pull up the following revisions(s) (requested by maxv in ticket #1901):
        sys/kern/vfs_syscalls.c:        revision 1.478, 1.480 via patch
        sys/coda/coda_vfsops.c:         revision 1.81
        sys/fs/adosfs/advfsops.c:       revision 1.70
        sys/fs/cd9660/cd9660_vfsops.c:  revision 1.84
        sys/fs/efs/efs_vfsops.c:        revision 1.25
        sys/fs/filecorefs/filecore_vfsops.c:    revision 1.76
        sys/fs/hfs/hfs_vfsops.c:        revision 1.31
        sys/fs/msdosfs/msdosfs_vfsops.c:        revision 1.107
        sys/fs/ntfs/ntfs_vfsops.c:      revision 1.94
        sys/fs/ptyfs/ptyfs_vfsops.c:    revision 1.50 via patch
        sys/fs/puffs/puffs_vfsops.c:    revision 1.110 via patch
        sys/fs/smbfs/smbfs_vfsops.c:    revision 1.100
        sys/fs/sysvbfs/sysvbfs_vfsops.c:        revision 1.43
        sys/fs/tmpfs/tmpfs_vfsops.c:    revision 1.59 via patch
        sys/fs/udf/udf_vfsops.c:        revision 1.67
        sys/fs/union/union_vfsops.c:    revision 1.72
        sys/fs/unionfs/unionfs_vfsops.c:        revision 1.13
        sys/kern/vfs_syscalls.c:        revision 1.479
        sys/miscfs/nullfs/null_vfsops.c:        revision 1.88 via patch
        sys/miscfs/overlay/overlay_vfsops.c:    revision 1.61
        sys/miscfs/procfs/procfs_vfsops.c:      revision 1.91
        sys/miscfs/umapfs/umap_vfsops.c:        revision 1.92
        sys/nfs/nfs_vfsops.c:           revision 1.227
        sys/ufs/ext2fs/ext2fs_vfsops.c: revision 1.180
        sys/ufs/ffs/ffs_vfsops.c:       revision 1.297
        sys/ufs/lfs/lfs_vfsops.c:       revision 1.321
        sys/ufs/mfs/mfs_vfsops.c:       revision 1.107

Due to missing checks in the mount syscall, and a wrong assumption on the
file systems side, the kernel could allocate an unbounded or zero-sized
memory buffer, and could dereference a NULL pointer when particular
arguments are given by a user.


To generate a diff of this commit:
cvs rdiff -u -r1.66 -r1.66.22.1 src/sys/coda/coda_vfsops.c
cvs rdiff -u -r1.53 -r1.53.20.1 src/sys/fs/adosfs/advfsops.c
cvs rdiff -u -r1.63.6.1 -r1.63.6.1.6.1 src/sys/fs/cd9660/cd9660_vfsops.c
cvs rdiff -u -r1.16.4.1 -r1.16.4.1.10.1 src/sys/fs/efs/efs_vfsops.c
cvs rdiff -u -r1.55 -r1.55.20.1 src/sys/fs/filecorefs/filecore_vfsops.c
cvs rdiff -u -r1.19 -r1.19.16.1 src/sys/fs/hfs/hfs_vfsops.c
cvs rdiff -u -r1.68.6.2 -r1.68.6.2.10.1 src/sys/fs/msdosfs/msdosfs_vfsops.c
cvs rdiff -u -r1.72.6.1 -r1.72.6.1.6.1 src/sys/fs/ntfs/ntfs_vfsops.c
cvs rdiff -u -r1.37 -r1.37.18.1 src/sys/fs/ptyfs/ptyfs_vfsops.c
cvs rdiff -u -r1.81.8.3 -r1.81.8.3.2.1 src/sys/fs/puffs/puffs_vfsops.c
cvs rdiff -u -r1.85.4.1 -r1.85.4.1.6.1 src/sys/fs/smbfs/smbfs_vfsops.c
cvs rdiff -u -r1.26 -r1.26.18.1 src/sys/fs/sysvbfs/sysvbfs_vfsops.c
cvs rdiff -u -r1.44 -r1.44.22.1 src/sys/fs/tmpfs/tmpfs_vfsops.c
cvs rdiff -u -r1.52.2.3 -r1.52.2.3.6.1 src/sys/fs/udf/udf_vfsops.c
cvs rdiff -u -r1.57.6.2 -r1.57.6.2.2.1 src/sys/fs/union/union_vfsops.c
cvs rdiff -u -r1.5 -r1.5.16.1 src/sys/fs/unionfs/unionfs_vfsops.c
cvs rdiff -u -r1.376.4.7 -r1.376.4.7.2.1 src/sys/kern/vfs_syscalls.c
cvs rdiff -u -r1.77 -r1.77.16.1 src/sys/miscfs/nullfs/null_vfsops.c
cvs rdiff -u -r1.53 -r1.53.16.1 src/sys/miscfs/overlay/overlay_vfsops.c
cvs rdiff -u -r1.81 -r1.81.20.1 src/sys/miscfs/procfs/procfs_vfsops.c
cvs rdiff -u -r1.80 -r1.80.16.1 src/sys/miscfs/umapfs/umap_vfsops.c
cvs rdiff -u -r1.203 -r1.203.14.1 src/sys/nfs/nfs_vfsops.c
cvs rdiff -u -r1.137.6.6 -r1.137.6.6.2.1 src/sys/ufs/ext2fs/ext2fs_vfsops.c
cvs rdiff -u -r1.239.2.4 -r1.239.2.4.6.1 src/sys/ufs/ffs/ffs_vfsops.c
cvs rdiff -u -r1.267.6.1 -r1.267.6.1.10.1 src/sys/ufs/lfs/lfs_vfsops.c
cvs rdiff -u -r1.98 -r1.98.16.1 src/sys/ufs/mfs/mfs_vfsops.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.