Page MenuHomeFreeBSD

netlink: Fully clear parser state between messages
ClosedPublic

Authored by des on Jul 30 2025, 1:36 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sat, Nov 22, 11:22 PM
Unknown Object (File)
Nov 7 2025, 10:21 PM
Unknown Object (File)
Nov 4 2025, 10:37 PM
Unknown Object (File)
Oct 29 2025, 10:41 AM
Unknown Object (File)
Oct 29 2025, 8:23 AM
Unknown Object (File)
Oct 29 2025, 8:06 AM
Unknown Object (File)
Oct 26 2025, 1:45 AM
Unknown Object (File)
Oct 10 2025, 11:42 AM
Subscribers

Details

Summary

Failing to reset the cookie between messages can lead to an attempt
to interpret a zeroed buffer as a struct nlattr, causing a length
calculation to underflow, resulting in a memcpy() call where the
length exceeds the actual size of the buffer.

MFC after: 1 week
PR: 283797

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 65846
Build 62729: arc lint + arc unit