From elias@kjell.utb.falun.se  Fri Jun 28 13:42:20 2002
Return-Path: <elias@kjell.utb.falun.se>
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 8ADEC37B401
	for <freebsd-gnats-submit@FreeBSD.org>; Fri, 28 Jun 2002 13:42:19 -0700 (PDT)
Received: from kjell.utb.falun.se (gw2.falun.se [192.121.234.252])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2C84843E09
	for <freebsd-gnats-submit@FreeBSD.org>; Fri, 28 Jun 2002 13:42:19 -0700 (PDT)
	(envelope-from elias@kjell.utb.falun.se)
Received: by kjell.utb.falun.se (Postfix, from userid 1003)
	id 0075C2D1; Fri, 28 Jun 2002 22:42:53 +0200 (CEST)
Message-Id: <20020628204253.0075C2D1@kjell.utb.falun.se>
Date: Fri, 28 Jun 2002 22:42:53 +0200 (CEST)
From: elias@kjell.utb.falun.se (elias)
To: freebsd-gnats-submit@FreeBSD.org,
	elias@kjell.utb.falun.se?subject=Re:%20kern/39960:%20wi%20driver%20can%20cause%20system%20crash%20when%20trying%20to%20handle%20negative%20value%20for%20WI%5FRID%5FTX%5FCRYPT%5FKEY
Subject: diff on if_wi.c

>Number:         39961
>Category:       kern
>Synopsis:       diff on if_wi.c
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    imp
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Jun 28 13:50:01 PDT 2002
>Closed-Date:    Sun Sep 29 12:24:30 MDT 2002
>Last-Modified:  Sun Sep 29 12:24:30 MDT 2002
>Originator:     
>Release:        
>Organization:
>Environment:
>Description:
 Here's the diff:
 
 ----------------
 *** if_wi.c.old Fri Jun 28 15:42:24 2002
 --- if_wi.c     Fri Jun 28 15:45:20 2002
 ***************
 *** 1151,1156 ****
 --- 1151,1159 ----
                         ltv = &p2ltv;
                         break;
                 case WI_RID_TX_CRYPT_KEY:
 +                       /* negative can values result in kernel crash */
 +                       if( ltv->wi_val < 0 )
 +                               return 0;
                         p2ltv.wi_type = WI_RID_P2_TX_CRYPT_KEY;
                         p2ltv.wi_len = 2;
                         p2ltv.wi_val = ltv->wi_val;
 -----------------
>How-To-Repeat:
>Fix:
>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: gnats-admin->freebsd-bugs 
Responsible-Changed-By: keramida 
Responsible-Changed-When: Mon Jul 1 08:43:55 PDT 2002 
Responsible-Changed-Why:  
Misfiled diff for if_wi.c 

http://www.freebsd.org/cgi/query-pr.cgi?pr=39961 
Responsible-Changed-From-To: freebsd-bugs->imp 
Responsible-Changed-By: johan 
Responsible-Changed-When: Mon Jul 22 20:51:38 PDT 2002 
Responsible-Changed-Why:  
Over to if_wi maintainer. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=39961 
State-Changed-From-To: open->closed 
State-Changed-By: imp 
State-Changed-When: Sun Sep 29 12:21:03 MDT 2002 
State-Changed-Why:  
Fixed. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=39961 
>Unformatted:
