diff options
author | Ian Moffett <ian@osmora.org> | 2025-07-16 18:02:04 -0400 |
---|---|---|
committer | Ian Moffett <ian@osmora.org> | 2025-07-16 18:02:04 -0400 |
commit | 3915e1c08e635f44b2d090cf80eb2a52e1fd5ebf (patch) | |
tree | 68d1d3ebc44c6e8908250d0be5a1c3ea8efb0082 /sys | |
parent | ea6fcbc3ebec385b908afea3861ee2382ad1f1e0 (diff) |
kernel: filedesc: Ensure 'fd' is valid during r/w
Signed-off-by: Ian Moffett <ian@osmora.org>
Diffstat (limited to 'sys')
-rw-r--r-- | sys/kern/kern_descrip.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/sys/kern/kern_descrip.c b/sys/kern/kern_descrip.c index b5ff144..57beaf6 100644 --- a/sys/kern/kern_descrip.c +++ b/sys/kern/kern_descrip.c @@ -154,6 +154,10 @@ fd_rw(unsigned int fd, void *buf, size_t count, uint8_t write) struct sio_txn sio; scret_t retval = 0; + if (fd > PROC_MAX_FILEDES) { + return -EBADF; + } + if (count > SSIZE_MAX) { retval = -EINVAL; goto done; |