[Midnightbsd-cvs] src: kern_time.c: Security fix for ktimer, the posix per process timer

[laffer1 at midnightbsd.org]

Log Message:
-----------
Security fix for ktimer, the posix per process timer as defined in POSIX real time extensions.  This only affects current.

Modified Files:
--------------
    src/sys/kern:
        kern_time.c (r1.2 -> r1.3)

-------------- next part --------------
Index: kern_time.c
===================================================================
RCS file: /home/cvs/src/sys/kern/kern_time.c,v
retrieving revision 1.2
retrieving revision 1.3
diff -L sys/kern/kern_time.c -L sys/kern/kern_time.c -u -r1.2 -r1.3
--- sys/kern/kern_time.c
+++ sys/kern/kern_time.c
@@ -1068,7 +1068,8 @@
 	struct itimer *it;
 
 	PROC_LOCK_ASSERT(p, MA_OWNED);
-	if ((p->p_itimers == NULL) || (timerid >= TIMER_MAX) ||
+	if ((p->p_itimers == NULL) ||
+	    (timerid < 0) || (timerid >= TIMER_MAX) ||
 	    (it = p->p_itimers->its_timers[timerid]) == NULL) {
 		return (NULL);
 	}