Page MenuHomeFreeBSD

sfxge(4): check buffer size for hash flags
ClosedPublic

Authored by arybchik on Nov 21 2018, 11:56 AM.
Tags
None
Referenced Files
F166031194: D18267.diff
Tue, Aug 11, 5:21 AM
F166015999: D18267.id50866.diff
Tue, Aug 11, 1:47 AM
Unknown Object (File)
Mon, Aug 10, 5:19 AM
Unknown Object (File)
Sun, Aug 9, 12:57 PM
Unknown Object (File)
Sat, Aug 8, 6:03 PM
Unknown Object (File)
Fri, Aug 7, 9:29 AM
Unknown Object (File)
Thu, Aug 6, 6:59 PM
Unknown Object (File)
Mon, Aug 3, 11:14 AM
Subscribers

Details

Summary

The efx_rx_scale_hash_flags_get interface is unsafe, as it does not
have an argument for the size of the output buffer used to return
the flags. While the only caller currently supplies a sufficiently
large buffer, this should be checked at runtime to avoid writing
past the end of the buffer.

Submitted by: Ivan Malov <ivan.malov at oktetlabs.ru>
Sponsored by: Solarflare Communications, Inc.

Test Plan

amd64 tinderbox kernel builds tested
driver loaded/unloaded, interfaces up/down, traffic works fine

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

This revision was not accepted when it landed; it landed in state Needs Review.Nov 30 2018, 7:07 AM
This revision was automatically updated to reflect the committed changes.