summaryrefslogtreecommitdiff
blob: 5778738771f29320189c3c0d4a947563b1bf7639 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
http://security.freebsd.org/advisories/FreeBSD-SA-09:06.ktimer.asc
https://bugs.gentoo.org/show_bug.cgi?id=263844
CVE-2009-1041

Index: sys/kern/kern_time.c
===================================================================
--- sys/kern/kern_time.c	(revision 190192)
+++ sys/kern/kern_time.c	(working copy)
@@ -1085,7 +1085,8 @@
 	struct itimer *it;
 
 	PROC_LOCK_ASSERT(p, MA_OWNED);
-	if ((p->p_itimers == NULL) || (timerid >= TIMER_MAX) ||
+	if ((p->p_itimers == NULL) ||
+	    (timerid < 0) || (timerid >= TIMER_MAX) ||
 	    (it = p->p_itimers->its_timers[timerid]) == NULL) {
 		return (NULL);
 	}