Author: kib
Date: Sat Jul 23 08:02:45 2016
New Revision: 303214
URL: https://svnweb.freebsd.org/changeset/base/303214

Log:
  MFC r302936:
  Explicitely check for the valid range of file descriptor values.

Modified:
  stable/10/sys/kern/kern_event.c
Directory Properties:
  stable/10/   (props changed)

Modified: stable/10/sys/kern/kern_event.c
==============================================================================
--- stable/10/sys/kern/kern_event.c     Sat Jul 23 06:30:00 2016        
(r303213)
+++ stable/10/sys/kern/kern_event.c     Sat Jul 23 08:02:45 2016        
(r303214)
@@ -1083,8 +1083,11 @@ kqueue_register(struct kqueue *kq, struc
 findkn:
        if (fops->f_isfd) {
                KASSERT(td != NULL, ("td is NULL"));
-               error = fget(td, kev->ident,
-                   cap_rights_init(&rights, CAP_EVENT), &fp);
+               if (kev->ident > INT_MAX)
+                       error = EBADF;
+               else
+                       error = fget(td, kev->ident,
+                           cap_rights_init(&rights, CAP_EVENT), &fp);
                if (error)
                        goto done;
 
_______________________________________________
svn-src-stable-10@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-stable-10
To unsubscribe, send any mail to "svn-src-stable-10-unsubscr...@freebsd.org"

Reply via email to