CVSROOT:        /cvs
Module name:    src
Changes by:     [email protected]        2014/04/18 05:51:17

Modified files:
        sys/arch/alpha/alpha: trap.c 
        sys/arch/amd64/amd64: trap.c 
        sys/arch/arm/arm: fault.c 
        sys/arch/hppa/hppa: trap.c 
        sys/arch/hppa64/hppa64: trap.c 
        sys/arch/i386/i386: trap.c 
        sys/arch/m88k/m88k: trap.c 
        sys/arch/mips64/mips64: trap.c 
        sys/arch/powerpc/powerpc: trap.c 
        sys/arch/sh/sh : trap.c 
        sys/arch/solbourne/solbourne: trap.c 
        sys/arch/sparc/sparc: trap.c 
        sys/arch/sparc64/sparc64: trap.c 
        sys/arch/vax/vax: trap.c 
        sys/dev        : systrace.c 
        sys/kern       : init_main.c kern_exec.c kern_exit.c kern_fork.c 
                         kern_prot.c kern_sig.c 
        sys/sys        : cdefs.h proc.h syscall_mi.h ucred.h 

Log message:
Have each thread keeps its own (counted!) reference to the process's ucreds
to avoid possible use-after-free references when swapping ids in threaded
processes.  "Do I have the right creds?" checks are always made with the
threads creds.

Inspired by FreeBSD and NetBSD
"right time" deraadt@

Reply via email to