CVS: cvs.openbsd.org: src

[Miod Vallat <miod_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org>]

CVSROOT:	/cvs
Module name:	src
Changes by:	miod_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org	2007/11/26 15:49:08

Modified files:
	sys/uvm        : uvm_pager.c 

Log message:
In uvm_aio_aiodone(), kill the variable-sized array on stack, and use a
fixed size array which size should match any buf; if a bogus buf is passed
to this function, the kernel will KASSERT instead of potentially running out
of stack and having an undefined behaviour.

ok deraadt@