Page MenuHomeFreeBSD

Handle security concerns in sys/dev about out of bound and initilized stack vars
ClosedPublic

Authored by mmokhi on Jan 30 2016, 2:21 PM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Jan 7, 9:51 AM
Unknown Object (File)
Wed, Dec 25, 2:40 PM
Unknown Object (File)
Dec 8 2024, 6:22 AM
Unknown Object (File)
Dec 4 2024, 1:04 AM
Unknown Object (File)
Nov 29 2024, 11:13 AM
Unknown Object (File)
Nov 27 2024, 8:49 PM
Unknown Object (File)
Nov 24 2024, 1:15 AM
Unknown Object (File)
Oct 30 2024, 6:57 AM

Details

Reviewers
allanjude
Summary

Use of initialised stack variables in tdfx_query_update

	 and handle Out of bounds negative array index in iicrdwr

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 2376
Build 2392: arc lint + arc unit

Event Timeline

mmokhi retitled this revision from to Handle security concerns in sys/dev about out of bound and initilized stack vars.
mmokhi updated this object.
mmokhi edited the test plan for this revision. (Show Details)
mmokhi added a subscriber: mmokhi.
ngie added inline comments.
sys/dev/tdfx/tdfx_pci.c
710โ€“712
  • You addressed the copyin piece, but the copyout piece could fail as well.
  • Please use copy{in,out} != 0 instead of testing for boolean true/false.
sys/dev/iicbus/iic.c
296โ€“298

This is ok. I'll commit this to head.

ngie removed a subscriber: ngie.

Updating D5132: Handle security concerns in sys/dev about out of bound and initilized stack vars

Using $cond != 0 instead of testing for boolean true/false.

Sorry for delay in doing "$cond != 0"
I didn't see your comments in my mail_box.
BTW, Done as you told :)

Thanks.

Resigning as reviewer because this is not my area of expertise and I lack the hardware to test out the change, i.e., I'm not a relevant reviewer.

@ngie It's committed by another committer AFAIK,
How can we close this review?

This revision is now accepted and ready to land.Jul 8 2017, 10:03 AM