Security vulnerability fix: #72317 - AF_UNIX Arbitrary Kernel Memory

diff --git a/sys-kernel/rsbac-dev-sources/ChangeLog b/sys-kernel/rsbac-dev-sources/ChangeLog
index 93e721a35e79e60d5003d7577d787d23e5587838..ab1944fb25260e7b8b763f11e8a769b2be2f2402 100644 (file)
--- a/sys-kernel/rsbac-dev-sources/ChangeLog
+++ b/sys-kernel/rsbac-dev-sources/ChangeLog
@@ -1,6 +1,15 @@
 # ChangeLog for sys-kernel/rsbac-dev-sources
 # Copyright 2000-2004 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/rsbac-dev-sources/ChangeLog,v 1.14 2004/11/28 22:46:15 kang Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/rsbac-dev-sources/ChangeLog,v 1.15 2004/12/02 18:56:58 kang Exp $
+
+*rsbac-dev-sources-2.6.7-r9 (02 Dec 2004)
+
+  02 Dec 2004; Guillaume Destuynder <kang@gentoo.org>
+  +files/rsbac-dev-sources-2.6.7-AF_UNIX.patch,
+  -rsbac-dev-sources-2.6.7-r8.ebuild, +rsbac-dev-sources-2.6.7-r9.ebuild:
+  Security vulnerability fix: #72317 - AF_UNIX Arbitrary Kernel Memory
+
+*rsbac-dev-sources-2.6.7-r8 (28 Nov 2004)
 
   28 Nov 2004; Guillaume Destuynder <kang@gentoo.org>
   files/rsbac-dev-sources-2.6.7-70681-binfmt.patch,

diff --git a/sys-kernel/rsbac-dev-sources/Manifest b/sys-kernel/rsbac-dev-sources/Manifest
index 6c4d601d58369351f82aa257788f0015845878af..ee2c472306dd54b6d65638515f17ba71a2e08dbb 100644 (file)
--- a/sys-kernel/rsbac-dev-sources/Manifest
+++ b/sys-kernel/rsbac-dev-sources/Manifest
@@ -1,6 +1,6 @@
-MD5 7e4bf36454f0642596014497cf02c8c2 ChangeLog 3685
 MD5 ed6fb50f79e8049f3f3576bb25c32747 metadata.xml 465
-MD5 4e73acf16cfc7b5091dd05dfe9de7273 rsbac-dev-sources-2.6.7-r8.ebuild 1756
+MD5 b03a45c3009ca8ec56dba83fa6afc8da rsbac-dev-sources-2.6.7-r9.ebuild 1796
+MD5 17c7be9091418932d25a5d94b4259eb8 ChangeLog 4019
 MD5 706d7794a822074aaf31502d7a7e48d3 files/2.6.7-cmdline.patch 455
 MD5 b6e38b41c8a79943df2ab2642149d06f files/rsbac-dev-sources-CAN-2004-0497.patch 2214
 MD5 f0e12ba218f53c2694a91259bdc2fdc7 files/rsbac-dev-sources-CAN-2004-0596.patch 494
@@ -13,4 +13,5 @@ MD5 b70bcb7c4896526b671f12695522cb0e files/rsbac-bugfix-v1.2.3-kang-01.diff 510
 MD5 452e04a312368605e145428c35bd0e05 files/rsbac-dev-sources-2.6.7-62524-ptmx.patch 572
 MD5 accdbfc81ddc59d568ed845b5972f10a files/rsbac-dev-sources-2.6.7-70681-binfmt.patch 2606
 MD5 7872d0af6e27fb6007833b113097bb34 files/rsbac-dev-sources-2.6.7-CAN-2004-0883.patch 3357
-MD5 fd024d5229ee08ef90d6a532bdf99977 files/digest-rsbac-dev-sources-2.6.7-r8 281
+MD5 530630d25910e6bd9376b63ea099655f files/rsbac-dev-sources-2.6.7-AF_UNIX.patch 469
+MD5 fd024d5229ee08ef90d6a532bdf99977 files/digest-rsbac-dev-sources-2.6.7-r9 281

diff --git a/sys-kernel/rsbac-dev-sources/files/digest-rsbac-dev-sources-2.6.7-r8 b/sys-kernel/rsbac-dev-sources/files/digest-rsbac-dev-sources-2.6.7-r9
similarity index 100%
rename from sys-kernel/rsbac-dev-sources/files/digest-rsbac-dev-sources-2.6.7-r8
rename to sys-kernel/rsbac-dev-sources/files/digest-rsbac-dev-sources-2.6.7-r9

diff --git a/sys-kernel/rsbac-dev-sources/files/rsbac-dev-sources-2.6.7-AF_UNIX.patch b/sys-kernel/rsbac-dev-sources/files/rsbac-dev-sources-2.6.7-AF_UNIX.patch
new file mode 100644 (file)
index 0000000..a95e94f
--- /dev/null
+++ b/sys-kernel/rsbac-dev-sources/files/rsbac-dev-sources-2.6.7-AF_UNIX.patch
@@ -0,0 +1,24 @@
+--- linux-2.6.9/net/unix/af_unix.c     2004-11-24 08:23:21 -08:00
++++ linux-2.6.9.plasmaroo/net/unix/af_unix.c   2004-11-24 08:23:21 -08:00
+@@ -1535,9 +1535,11 @@
+ 
+       msg->msg_namelen = 0;
+ 
++      down(&u->readsem);
++
+       skb = skb_recv_datagram(sk, flags, noblock, &err);
+       if (!skb)
+-              goto out;
++              goto out_unlock;
+ 
+       wake_up_interruptible(&u->peer_wait);
+ 
+@@ -1587,6 +1589,8 @@
+ 
+ out_free:
+       skb_free_datagram(sk,skb);
++out_unlock:
++      up(&u->readsem);
+ out:
+       return err;
+ }

diff --git a/sys-kernel/rsbac-dev-sources/rsbac-dev-sources-2.6.7-r8.ebuild b/sys-kernel/rsbac-dev-sources/rsbac-dev-sources-2.6.7-r9.ebuild
similarity index 94%
rename from sys-kernel/rsbac-dev-sources/rsbac-dev-sources-2.6.7-r8.ebuild
rename to sys-kernel/rsbac-dev-sources/rsbac-dev-sources-2.6.7-r9.ebuild
index 63eb3c55a56f79d90ff89a2ec4ab696b2e19579f..21f0577cd80f7c764b59a6fffedf22d01e2a49dd 100644 (file)
--- a/sys-kernel/rsbac-dev-sources/rsbac-dev-sources-2.6.7-r8.ebuild
+++ b/sys-kernel/rsbac-dev-sources/rsbac-dev-sources-2.6.7-r9.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2004 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/rsbac-dev-sources/rsbac-dev-sources-2.6.7-r8.ebuild,v 1.1 2004/11/28 22:46:15 kang Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/rsbac-dev-sources/rsbac-dev-sources-2.6.7-r9.ebuild,v 1.1 2004/12/02 18:56:58 kang Exp $
 
 IUSE=""
 ETYPE="sources"
@@ -18,6 +18,7 @@ RGPV_SRC="mirror://rsbac-patches-${KV_MAJOR}.${KV_MINOR}-${RGPV}.tar.bz2"
 
 UNIPATCH_STRICTORDER="yes"
 UNIPATCH_LIST="${FILESDIR}/${PN}-iptables-dos.patch
+       ${FILESDIR}/${PN}-${OKV}-AF_UNIX.patch
        ${FILESDIR}/${PN}-${OKV}-CAN-2004-0883.patch
        ${FILESDIR}/${PN}-CAN-2004-0497.patch
        ${FILESDIR}/${PN}-CAN-2004-0596.patch