21 lines
655 B
Diff
21 lines
655 B
Diff
--- sys/amd64/amd64/sys_machdep.c.orig
|
|
+++ sys/amd64/amd64/sys_machdep.c
|
|
@@ -608,6 +608,8 @@
|
|
largest_ld = uap->start + uap->num;
|
|
if (largest_ld > max_ldt_segment)
|
|
largest_ld = max_ldt_segment;
|
|
+ if (largest_ld < uap->start)
|
|
+ return (EINVAL);
|
|
i = largest_ld - uap->start;
|
|
mtx_lock(&dt_lock);
|
|
bzero(&((struct user_segment_descriptor *)(pldt->ldt_base))
|
|
@@ -620,7 +622,8 @@
|
|
/* verify range of descriptors to modify */
|
|
largest_ld = uap->start + uap->num;
|
|
if (uap->start >= max_ldt_segment ||
|
|
- largest_ld > max_ldt_segment)
|
|
+ largest_ld > max_ldt_segment ||
|
|
+ largest_ld < uap->start)
|
|
return (EINVAL);
|
|
}
|
|
|