Page MenuHomeFreeBSD

Avoid kernel stack disclosure in compat32 stat
ClosedPublic

Authored by emaste on Mar 29 2022, 2:53 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sun, Aug 9, 7:40 PM
Unknown Object (File)
Fri, Aug 7, 10:02 PM
Unknown Object (File)
Fri, Aug 7, 9:11 PM
Unknown Object (File)
Thu, Aug 6, 7:25 AM
Unknown Object (File)
Thu, Aug 6, 7:24 AM
Unknown Object (File)
Jun 16 2026, 2:29 PM
Unknown Object (File)
May 16 2026, 10:44 PM
Unknown Object (File)
May 16 2026, 10:43 PM
Subscribers

Details

Summary
copy_stat and copy_ostat used by 32-bit compat *stat calls left some
padding bytes uninitialized.

This issue does not exist in stable/12 and later as it was incidentally
addressed as part of the 64-bit inode project.

Reported by:    Reno Robert, Trend Micro Zero Day Initiative
Sponsored by:   The FreeBSD Foundation

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable