Page MenuHomeFreeBSD

Avoid kernel stack disclosure in compat32 stat
ClosedPublic

Authored by emaste on Mar 29 2022, 2:53 PM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Nov 25, 10:33 PM
Unknown Object (File)
Tue, Nov 25, 10:07 AM
Unknown Object (File)
Tue, Nov 18, 4:34 PM
Unknown Object (File)
Sun, Nov 9, 4:49 AM
Unknown Object (File)
Fri, Oct 31, 12:42 PM
Unknown Object (File)
Wed, Oct 29, 12:43 PM
Unknown Object (File)
Wed, Oct 29, 11:51 AM
Unknown Object (File)
Wed, Oct 29, 11:49 AM
Subscribers

Details

Summary
copy_stat and copy_ostat used by 32-bit compat *stat calls left some
padding bytes uninitialized.

This issue does not exist in stable/12 and later as it was incidentally
addressed as part of the 64-bit inode project.

Reported by:    Reno Robert, Trend Micro Zero Day Initiative
Sponsored by:   The FreeBSD Foundation

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable