Re: Update for FreeBSD Security Advisory FreeBSD-SA-12:04.sysret

On 19 Jun 2012, at 19:15, Steven Chamberlain wrote:

> On 18/06/12 22:37, Simon L. B. Nielsen wrote:
>> Note that this is ONLY for FreeBSD 8.1. Other branches are OK.
>=20
> Having seen the correct fix now, I'm starting to wonder if the commit =
to
> RELENG_7_4 was really okay too?
>=20
> =
http://svnweb.freebsd.org/base/releng/7.4/sys/amd64/amd64/trap.c?annotate=3D=
236953#l975
>=20
> The inserted code does not appear at the end of the function, like it
> does now in all other versions including 8.1 which is the most =
similar.
>=20
> I expect this would at least trap if the exploit was attempted, but =
then
> it would omit the rest of the function, including userret();  would =
that
> have consequences?

=46rom what our "kernel experts" (jhb/kib - sorry can't recall who =
checked this), it should still work fine in the location it is in for =
7.4.

--=20
Simon L. B. Nielsen

_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"