Subject: Re: kern/35278: veriexec sometimes feeds user va to log(9)
To: None <kern-bug-people@netbsd.org, gnats-admin@netbsd.org,>
From: Elad Efrat <elad@NetBSD.org>
List: netbsd-bugs
Date: 12/23/2006 12:20:06
The following reply was made to PR kern/35278; it has been noted by GNATS.

From: Elad Efrat <elad@NetBSD.org>
To: YAMAMOTO Takashi <yamt@mwd.biglobe.ne.jp>
Cc: gnats-bugs@NetBSD.org
Subject: Re: kern/35278: veriexec sometimes feeds user va to log(9)
Date: Sat, 23 Dec 2006 14:14:13 +0200

 YAMAMOTO Takashi wrote:
 
 > do you mean what SAVENAME does is the same as what you want for veriexec?
 
 I mean that if the problem in this pr was that veriexec was using the
 ni_dirp pointer, which may be in userspace, we can solve it by passing
 SAVENAME in the call to namei() (which adds no overhead in case veriexec
 is not used, because the copyinstr() happens anyway) and use cn_pnbuf.
 
 >>> then, you don't care if it's an original pathname or not?
 >> what do you mean "an original pathname or not"?
 > if it's a pathname which is specified by a user.
 
 you mean if someone types 'ls' vs. 'cd /bin && ./ls'?
 
 -e.