Page MenuHomeFreeBSD

ktrace: Handle negative array sizes in ktrstructarray
ClosedPublic

Authored by markj on May 26 2021, 6:14 PM.

Details

Summary

ktrstructarray() may be used to create copies of kevent(2) change and
event arrays. It is called before parameter validation is done and so
should check for bogus array lengths before allocating a copy.

Reported by: syzkaller

Diff Detail

Repository
rG FreeBSD src repository
Lint
Automatic diff as part of commit; lint not applicable.
Unit
Automatic diff as part of commit; unit tests not applicable.