Re: OpenBSD on BUGTRAQ again.

[Artur Grabowski <art@stacken.kth.se>]

Seth Arnold <sarnold@willamette.edu> writes:

> Bummer that a) they were so rude to Theo and crew b) their advisory was
> one of four attachments -- two inside of one, one blank and one html
> boilerplate, and then the real attachment. Seems like typical outlook
> express users, except for their claim to some bug in UVM.

It's not a bug in UVM. It was a bug in how UVM is used.

> Since they were short on content (I didn't want to wade through their
> broken source for the exploit), I don't know if resource limits ala
> /etc/login.conf would fix the problem or not. I figured Theo and crew
> would know what to do. :)

Already fixed. revision 1.9 of sys/kern/exec_subr.c

//art