Paths

Table of Contentst

Differential D31422

tcp, udp: improve input validation in bind()
ClosedPublic
Actions

Authored by tuexen on Aug 5 2021, 11:03 AM.

Tags

None

Referenced Files

	Unknown Object (File)
	Sun, Feb 8, 2:12 PM

	Unknown Object (File)
	Sat, Feb 7, 6:29 PM

	Unknown Object (File)
	Tue, Feb 3, 1:24 PM

	Unknown Object (File)
	Sat, Jan 31, 1:44 AM

	Unknown Object (File)
	Jan 8 2026, 5:20 PM

	Unknown Object (File)
	Jan 6 2026, 5:15 AM

	Unknown Object (File)
	Dec 20 2025, 8:45 AM

	Unknown Object (File)
	Dec 15 2025, 6:09 AM

View All 91 Files

Subscribers

Details

Reviewers

markj
rscheff
rrs

Group Reviewers

Commits

rGdb8fc0ef23d1: tcp, udp: improve input validation in handling bind()
rG3f1f6b6ef7f6: tcp, udp: improve input validation in handling bind()

Summary

This fixes:

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

tuexen created this revision.Aug 5 2021, 11:03 AM

Herald added a reviewer: transport. · View Herald TranscriptAug 5 2021, 11:03 AM

Herald added a subscriber: melifaro. · View Herald Transcript

tuexen requested review of this revision.Aug 5 2021, 11:03 AM

tuexen added reviewers: rscheff, rrs.

lgtm

This revision is now accepted and ready to land.Aug 5 2021, 11:08 AM

Thank you.

sys/netinet/tcp_usrreq.c
329	I would just check `nam->sa_len != sizeof(*sinp)` since we perform that exact check again below. This is ok though.

tuexen marked an inline comment as done.Aug 5 2021, 1:04 PM

tuexen added inline comments.

sys/netinet/tcp_usrreq.c
329	I was considering that or even just do the check for `sa_len` before the check for `sa_family`. I decided to do it this way to report `EINVAL` if `sa_len` is not correct as often as possible.

Closed by commit rG3f1f6b6ef7f6: tcp, udp: improve input validation in handling bind() (authored by tuexen). · Explain WhyAug 5 2021, 1:12 PM

This revision was automatically updated to reflect the committed changes.

tuexen marked an inline comment as done.

tuexen added a commit: rG3f1f6b6ef7f6: tcp, udp: improve input validation in handling bind().

tuexen added a commit: rGdb8fc0ef23d1: tcp, udp: improve input validation in handling bind().Feb 22 2022, 10:28 PM

Herald added subscribers: glebius, imp. · View Herald TranscriptFeb 22 2022, 10:28 PM

Revision Contents
Changeset List

Path

Size

sys/

netinet/

1 line

1 line

Diff 93267

sys/netinet/tcp_usrreq.c

Loading...

sys/netinet/udp_usrreq.c

Loading...