From 0d20b83737d5944e98a5f2b56e910cf0baf901d5 Mon Sep 17 00:00:00 2001
From: Matthew Dillon <dillon@apollo.backplane.com>
Date: Tue, 26 May 2015 11:03:32 -0700
Subject: [PATCH] kernel - Return EINVAL on negative timeout to poll()

* Return EINVAL if poll() is called with a negative
  timeout, as per manual page.

Submitted-by: stateless
---
 sys/kern/sys_generic.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/sys/kern/sys_generic.c b/sys/kern/sys_generic.c
index d384589cb5..65097f0a94 100644
--- a/sys/kern/sys_generic.c
+++ b/sys/kern/sys_generic.c
@@ -1223,6 +1223,8 @@ sys_poll(struct poll_args *uap)
 	int error;
 
 	if (uap->timeout != INFTIM) {
+		if (uap->timeout < 0)
+			return (EINVAL);
 		ts.tv_sec = uap->timeout / 1000;
 		ts.tv_nsec = (uap->timeout % 1000) * 1000 * 1000;
 		tsp = &ts;
-- 
2.41.0