Re: cvs commit: src/sys/kern sysv_shm.c

[Jeroen Ruigrok/asmodai <asmodai@xxxxxx>]

-On [20040205 20:02], David Rhodus (drhodus@xxxxxxxxxxxxxxxxxxxxxxx) wrote:
>    Modified files:
>      sys/kern             sysv_shm.c
>    Log:
>    Correct a reference counting bug in shmat(2).  If vm_map_find(9)
>    failed, the reference count for the virtual memory object referenced
>    by the specified shared memory segment would have been erroneously
>    incremented.

Just to make it clear:

this can allow local users to elevate their privileges.

-- 
Jeroen Ruigrok van der Werven <asmodai(at)wxs.nl> / asmodai / kita no mono
PGP fingerprint: 2D92 980E 45FE 2C28 9DB7  9D88 97E6 839B 2EAC 625B
http://www.tendra.org/   | http://diary.in-nomine.org/
Those who would give up their freedoms to secure temporary safety deserve
neither freedom or safety.