OpenBSD/src 7roetgF — sys/dev/isa pcppi.c spkr.c
Reject negative input from userland in spkrioctl(). One of the arguments are later passed to timeout_add() which panics if the given ticks are negative. While here, clamp arguments in pcppi_bell() in order to prevent overflow. ok visa@ Reported-by: syzbot+23089c40a85aa70bed6f at syzkaller.appspotmail.com
| Version | Delta | File | |
|---|---|---|---|
| 1.14 | +11 | -1 | sys/dev/isa/pcppi.c |
| 1.23 | +5 | -1 | sys/dev/isa/spkr.c |
| +16 | -2 | 2 files | |
