Page MenuHomeFreeBSD

Handle security concerns in sys/dev about out of bound and initilized stack vars
ClosedPublic

Authored by mmokhi on Jan 30 2016, 2:21 PM.
Tags
None
Referenced Files
F165668963: D5132.id12981.diff
Sun, Aug 9, 3:07 AM
Unknown Object (File)
Fri, Aug 7, 8:21 PM
Unknown Object (File)
Tue, Jul 21, 3:39 PM
Unknown Object (File)
Tue, Jul 21, 11:16 AM
Unknown Object (File)
Tue, Jul 21, 1:17 AM
Unknown Object (File)
Mon, Jul 20, 1:11 AM
Unknown Object (File)
Jul 6 2026, 2:33 PM
Unknown Object (File)
Jul 1 2026, 10:24 AM

Details

Reviewers
allanjude
Summary

Use of initialised stack variables in tdfx_query_update

	 and handle Out of bounds negative array index in iicrdwr

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 2376
Build 2392: arc lint + arc unit

Event Timeline

mmokhi retitled this revision from to Handle security concerns in sys/dev about out of bound and initilized stack vars.
mmokhi updated this object.
mmokhi edited the test plan for this revision. (Show Details)
mmokhi added a subscriber: mmokhi.
ngie added inline comments.
sys/dev/tdfx/tdfx_pci.c
710โ€“712
  • You addressed the copyin piece, but the copyout piece could fail as well.
  • Please use copy{in,out} != 0 instead of testing for boolean true/false.
sys/dev/iicbus/iic.c
296โ€“298

This is ok. I'll commit this to head.

ngie removed a subscriber: ngie.

Updating D5132: Handle security concerns in sys/dev about out of bound and initilized stack vars

Using $cond != 0 instead of testing for boolean true/false.

Sorry for delay in doing "$cond != 0"
I didn't see your comments in my mail_box.
BTW, Done as you told :)

Thanks.

Resigning as reviewer because this is not my area of expertise and I lack the hardware to test out the change, i.e., I'm not a relevant reviewer.

@ngie It's committed by another committer AFAIK,
How can we close this review?

This revision is now accepted and ready to land.Jul 8 2017, 10:03 AM