Page MenuHomeFreeBSD

Avoid kernel stack disclosure in compat32 stat
ClosedPublic

Authored by emaste on Mar 29 2022, 2:53 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sun, Sep 22, 8:47 PM
Unknown Object (File)
Fri, Sep 13, 4:21 AM
Unknown Object (File)
Tue, Sep 10, 11:43 PM
Unknown Object (File)
Tue, Sep 10, 11:43 PM
Unknown Object (File)
Tue, Sep 10, 11:43 PM
Unknown Object (File)
Thu, Sep 5, 9:15 AM
Unknown Object (File)
Sep 1 2024, 12:55 AM
Unknown Object (File)
Aug 30 2024, 5:16 PM
Subscribers

Details

Summary
copy_stat and copy_ostat used by 32-bit compat *stat calls left some
padding bytes uninitialized.

This issue does not exist in stable/12 and later as it was incidentally
addressed as part of the 64-bit inode project.

Reported by:    Reno Robert, Trend Micro Zero Day Initiative
Sponsored by:   The FreeBSD Foundation

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable