mirror/freebsd
1
0
Fork 0
mirror of https://git.FreeBSD.org/src.git synced 2024-12-29 12:03:03 +00:00
Code Issues Releases Activity

Check the alignment of the stack pointer before copying in windows from the

Browse Source 
user stack in response to a failed window fill, allowing the process to be
killed if its wrong.  This caused user programs which misalign their stack
pointer to get stuck in an infinite loop at the kernel-userland boundary,
which is mostly harmless.

The same thing causes a fatal RED state exception on OpenBSD and probably
NetBSD.

Inspired by:	art@openbsd.org
This commit is contained in:
Jake Burkholder 2002-04-20 16:23:52 +00:00
parent bb52b4f3fc
commit d1fef1792c
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=95134
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
sys/sparc64/sparc64/rwindow.c
View File

@ -60,6 +60,8 @@ rwindow_load(struct thread *td, struct trapframe *tf, int n)
for (i = 0; i < n; i++) {
CTR1(KTR_TRAP, "rwindow_load: usp=%#lx", usp);
usp += SPOFF;
if ((error = (usp & 0x7)) != 0)
break;
error = copyin((void *)usp, &rw, sizeof rw);
usp = rw.rw_in[6];
}
@ -91,6 +93,8 @@ rwindow_save(struct thread *td)
usp = *ausp;
CTR1(KTR_TRAP, "rwindow_save: usp=%#lx", usp);
usp += SPOFF;
if ((error = (usp & 0x7)) != 0)
break;
error = copyout(rw, (void *)usp, sizeof *rw);
if (error)
break;