D47240.diff
No OneTemporary
Actions

Size

514 B

Referenced Files

None

Subscribers

None

D47240.diff
View Options

	diff --git a/sys/kern/kern_linker.c b/sys/kern/kern_linker.c
	--- a/sys/kern/kern_linker.c
	+++ b/sys/kern/kern_linker.c
	@@ -2030,6 +2030,10 @@
	printf("linker.hints file too large %ld\n", (long)vattr.va_size);
	goto bad;
	}
	+ if (vattr.va_size < sizeof(ival)) {
	+ printf("linker.hints file truncated\n");
	+ goto bad;
	+ }
	hints = malloc(vattr.va_size, M_TEMP, M_WAITOK);
	error = vn_rdwr(UIO_READ, nd.ni_vp, (caddr_t)hints, vattr.va_size, 0,
	UIO_SYSSPACE, IO_NODELOCKED, cred, NOCRED, &reclen, td);