Page MenuHomeFreeBSD

rtsock: fix buffer overrun (sockaddr misuse)
ClosedPublic

Authored by takahiro.kurosawa_gmail.com on May 12 2022, 11:24 PM.
Tags
None
Referenced Files
Unknown Object (File)
Wed, Mar 18, 5:39 AM
Unknown Object (File)
Tue, Mar 17, 5:13 PM
Unknown Object (File)
Sat, Mar 14, 8:04 AM
Unknown Object (File)
Fri, Mar 13, 12:58 PM
Unknown Object (File)
Sat, Feb 21, 9:28 AM
Unknown Object (File)
Feb 8 2026, 4:16 AM
Unknown Object (File)
Feb 7 2026, 5:34 PM
Unknown Object (File)
Jan 31 2026, 7:27 AM

Details

Summary

struct sockaddr is not sufficient for buffer that can hold any
sockaddr_* structure. struct sockaddr_storage should be used.

Test Plan

ifconfig epair create
ifconfig epair0a inet6 add 2001:db8::1 up
ndp -s 2001:db8::2 02:86:98:2e:96:0b proxy # this triggers kernel stack overflow

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 45553
Build 42441: arc lint + arc unit