summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorPeter Wemm <peter@FreeBSD.org>2002-09-28 19:37:54 +0000
committerPeter Wemm <peter@FreeBSD.org>2002-09-28 19:37:54 +0000
commit8b223ac209ac76b4aa5faab630d0f2da9ce669ee (patch)
treedf930f77c887f163a8c5fc2910d4e62148053085
parentb7df8acc7cc9e78243129ad04a1a67469bd56af2 (diff)
Notes
-rw-r--r--sys/amd64/amd64/sys_machdep.c2
-rw-r--r--sys/i386/i386/sys_machdep.c2
2 files changed, 2 insertions, 2 deletions
diff --git a/sys/amd64/amd64/sys_machdep.c b/sys/amd64/amd64/sys_machdep.c
index c756be7c96a0..3e3a4c4c4184 100644
--- a/sys/amd64/amd64/sys_machdep.c
+++ b/sys/amd64/amd64/sys_machdep.c
@@ -389,7 +389,7 @@ i386_get_ldt(td, args)
num = min(uap->num, nldt);
lp = &ldt[uap->start];
}
- if (uap->start > nldt)
+ if (uap->start + num > nldt)
return(EINVAL);
error = copyout(lp, uap->descs, num * sizeof(union descriptor));
diff --git a/sys/i386/i386/sys_machdep.c b/sys/i386/i386/sys_machdep.c
index c756be7c96a0..3e3a4c4c4184 100644
--- a/sys/i386/i386/sys_machdep.c
+++ b/sys/i386/i386/sys_machdep.c
@@ -389,7 +389,7 @@ i386_get_ldt(td, args)
num = min(uap->num, nldt);
lp = &ldt[uap->start];
}
- if (uap->start > nldt)
+ if (uap->start + num > nldt)
return(EINVAL);
error = copyout(lp, uap->descs, num * sizeof(union descriptor));