[src/netbsd-6-1]: src/doc ticket 1051

[bouyer <bouyer%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/2c26bd1ef199
branches:  netbsd-6-1
changeset: 775941:2c26bd1ef199
user:      bouyer <bouyer%NetBSD.org@localhost>
date:      Mon Apr 21 21:04:25 2014 +0000

description:
ticket 1051

diffstat:

 doc/CHANGES-6.1.5 |  11 ++++++++++-
 1 files changed, 10 insertions(+), 1 deletions(-)

diffs (22 lines):

diff -r 3c9f39af6d99 -r 2c26bd1ef199 doc/CHANGES-6.1.5
--- a/doc/CHANGES-6.1.5 Mon Apr 21 21:03:53 2014 +0000
+++ b/doc/CHANGES-6.1.5 Mon Apr 21 21:04:25 2014 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-6.1.5,v 1.1.2.3 2014/04/21 10:18:39 bouyer Exp $
+# $NetBSD: CHANGES-6.1.5,v 1.1.2.4 2014/04/21 21:04:25 bouyer Exp $
 
 A complete list of changes from the NetBSD 6.1.4 release to the NetBSD 6.1.5
 release:
@@ -64,3 +64,12 @@
        by a local user to panic the system.
        [maxv, ticket #1050]
 
+sys/compat/linux/common/linux_exec_elf32.c     1.91 via patch
+
+       A specially-crafted linux binary could easily control a kernel array
+       index.
+       Add some checks to ensure that nothing will be read outside the
+       allocated area.
+       Rewrite the code so that we don't need to allocate the whole section.
+       [maxv, ticket #1051]
+