Page MenuHomeFreeBSD

sfxge(4): check buffer size for hash flags
ClosedPublic

Authored by arybchik on Nov 21 2018, 11:56 AM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Dec 17, 10:51 AM
Unknown Object (File)
Mon, Dec 9, 2:52 AM
Unknown Object (File)
Nov 14 2024, 9:19 AM
Unknown Object (File)
Oct 19 2024, 2:22 PM
Unknown Object (File)
Oct 6 2024, 10:19 AM
Unknown Object (File)
Oct 5 2024, 12:11 AM
Unknown Object (File)
Sep 27 2024, 12:46 AM
Unknown Object (File)
Sep 26 2024, 4:38 PM
Subscribers

Details

Summary

The efx_rx_scale_hash_flags_get interface is unsafe, as it does not
have an argument for the size of the output buffer used to return
the flags. While the only caller currently supplies a sufficiently
large buffer, this should be checked at runtime to avoid writing
past the end of the buffer.

Submitted by: Ivan Malov <ivan.malov at oktetlabs.ru>
Sponsored by: Solarflare Communications, Inc.

Test Plan

amd64 tinderbox kernel builds tested
driver loaded/unloaded, interfaces up/down, traffic works fine

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

This revision was not accepted when it landed; it landed in state Needs Review.Nov 30 2018, 7:07 AM
This revision was automatically updated to reflect the committed changes.