Page MenuHomeFreeBSD

Handle security concerns in sys/dev about out of bound and initilized stack vars
ClosedPublic

Authored by mmokhi on Jan 30 2016, 2:21 PM.
Tags
None
Referenced Files
F82046885: D5132.id12981.diff
Wed, Apr 24, 11:44 PM
Unknown Object (File)
Jan 31 2024, 8:15 AM
Unknown Object (File)
Jan 20 2024, 2:01 AM
Unknown Object (File)
Jan 4 2024, 6:07 PM
Unknown Object (File)
Jan 4 2024, 6:07 PM
Unknown Object (File)
Jan 4 2024, 6:07 PM
Unknown Object (File)
Jan 4 2024, 3:35 PM
Unknown Object (File)
Jan 3 2024, 6:03 PM

Details

Reviewers
allanjude
Summary

Use of initialised stack variables in tdfx_query_update

	 and handle Out of bounds negative array index in iicrdwr

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 2376
Build 2392: arc lint + arc unit

Event Timeline

mmokhi retitled this revision from to Handle security concerns in sys/dev about out of bound and initilized stack vars.
mmokhi updated this object.
mmokhi edited the test plan for this revision. (Show Details)
mmokhi added a subscriber: mmokhi.
ngie added inline comments.
sys/dev/tdfx/tdfx_pci.c
710โ€“712
  • You addressed the copyin piece, but the copyout piece could fail as well.
  • Please use copy{in,out} != 0 instead of testing for boolean true/false.
sys/dev/iicbus/iic.c
296โ€“298

This is ok. I'll commit this to head.

ngie removed a subscriber: ngie.

Updating D5132: Handle security concerns in sys/dev about out of bound and initilized stack vars

Using $cond != 0 instead of testing for boolean true/false.

Sorry for delay in doing "$cond != 0"
I didn't see your comments in my mail_box.
BTW, Done as you told :)

Thanks.

Resigning as reviewer because this is not my area of expertise and I lack the hardware to test out the change, i.e., I'm not a relevant reviewer.

@ngie It's committed by another committer AFAIK,
How can we close this review?

This revision is now accepted and ready to land.Jul 8 2017, 10:03 AM