Page MenuHomeFreeBSD

ktrace: Handle negative array sizes in ktrstructarray
ClosedPublic

Authored by markj on May 26 2021, 6:14 PM.
Tags
None
Referenced Files
Unknown Object (File)
Feb 6 2024, 6:40 PM
Unknown Object (File)
Dec 30 2023, 8:36 AM
Unknown Object (File)
Dec 30 2023, 8:36 AM
Unknown Object (File)
Dec 30 2023, 8:36 AM
Unknown Object (File)
Dec 30 2023, 8:24 AM
Unknown Object (File)
Dec 20 2023, 3:50 AM
Unknown Object (File)
Nov 24 2023, 11:17 AM
Unknown Object (File)
Nov 23 2023, 8:45 AM
Subscribers

Details

Summary

ktrstructarray() may be used to create copies of kevent(2) change and
event arrays. It is called before parameter validation is done and so
should check for bogus array lengths before allocating a copy.

Reported by: syzkaller

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable