Re: cvs commit: src/sys/bus/firewire fwdev.c

[Joerg Sonnenberger <joerg@xxxxxxxxxxxxxxxxx>]

On Wed, Dec 06, 2006 at 03:50:06AM -0800, Simon Schubert wrote:
> corecode    2006/12/06 03:50:06 PST
> 
> DragonFly src repository
> 
>   Modified files:
>     sys/bus/firewire     fwdev.c 
>   Log:
>   Correct a signedness bug which allowed members of the operator
>   group to read kernel memory.
>   
>   Obtained-from: FreeBSD / FreeBSD-SA-06:25.kmem
>   
>   Revision  Changes    Path
>   1.18      +1 -1      src/sys/bus/firewire/fwdev.c
> 
> 
> http://www.dragonflybsd.org/cvsweb/src/sys/bus/firewire/fwdev.c.diff?r1=1.17&r2=1.18&f=u

Note that the problem is *NOT* exploitable on DragonFly. The advisory
from FreeBSD is overdefensive as a number of platforms are by design not
affected, including i386.

Joerg