thr_kill2: Respect p_cansignal()

Approved by:	so
Security:	FreeBSD-SA-26:25.thr
Security:	CVE-2026-45256
Reported by:	Igor Gabriel Sousa e Souza
Reported by:	Yuxiang Yang, Yizhou Zhao, Ao Wang, Xuewei Feng, Qi Li, and Ke Xu from Tsinghua University using GLM-5.1 from Z.ai
Reviewed by:	emaste, kib
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D57237

This commit is contained in:

Mark Johnston

2026-05-25 15:12:57 +00:00

parent c94b8eee5b

commit bf1e2c0797

1 changed files with 1 additions and 1 deletions

									
										sys/kern/kern_thr.c
									
		+1
		-1
	
												View File
												
				@@ -506,7 +506,7 @@ sys_thr_kill2(struct thread *td, struct thr_kill2_args *uap)

						p = ttd->td_proc;

						AUDIT_ARG_PROCESS(p);

						error = p_cansignal(td, p, uap->sig);

						if (uap->sig == 0)

						if (error != 0 || uap->sig == 0)

							;

						else if (!_SIG_VALID(uap->sig))

							error = EINVAL;