diff options
| author |   anton <anton@openbsd.org> | 2019-02-01 07:02:31 +0000 |
|---|---|---|
| committer | anton <anton@openbsd.org> | 2019-02-01 07:02:31 +0000 |
| commit | 77ada9744473f0a4789e493e59a470d02da7cac3 (patch) | |
| tree | 06824faf3ed4999b41c3e61715cf9ee37e33bdfa /lib/libcxx/src | |
| parent | update currency exchange rates; (diff) | |
| download | wireguard-openbsd-77ada9744473f0a4789e493e59a470d02da7cac3.tar.xz wireguard-openbsd-77ada9744473f0a4789e493e59a470d02da7cac3.zip | |
In wskbdclose(), use the same logic as in wskbdopen() to determine if
the device was opened in write-only mode. Relying on me_evar being NULL
does not work if the wskbd device was opened first followed by opening a
wsmux device. Closing the wskbd device first at this stage would cause
the wscons_event queue inherited from the wsmux device to be freed. This
in turn could cause a panic if an ioctl(WSMUXIO_INJECTEVENT) command is
issued to the wsmux device.
ok deraadt@ visa@
Reported-by: syzbot+ed88256423ae8d882b8b@syzkaller.appspotmail.com
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions