Page MenuHomeFreeBSD

uipc_shm: Copyin userpath for ktrace(2)
ClosedPublic

Authored by jfree on Apr 9 2024, 9:54 PM.
Tags
None
Referenced Files
F168559832: D44702.id136789.diff
Sat, Aug 29, 12:53 AM
F168538787: D44702.id.diff
Fri, Aug 28, 10:13 PM
Unknown Object (File)
Thu, Aug 27, 10:38 PM
Unknown Object (File)
Wed, Aug 26, 6:48 AM
Unknown Object (File)
Wed, Aug 26, 3:54 AM
Unknown Object (File)
Tue, Aug 25, 8:59 PM
Unknown Object (File)
Tue, Aug 25, 11:50 AM
Unknown Object (File)
Tue, Aug 25, 11:50 AM
Subscribers

Details

Summary

If userpath is not SHM_ANON, then copy it in early so ktrace(2) can
record it. Without this change, ktrace(2) will attempt to strcpy a
userspace string and trigger a page fault.

Reported by: syzbot+490b9c2a89f53b1b9779@syzkaller.appspotmail.com
Fixes: 0cd9cde767c3
Approved by: markj (mentor)
MFC after: 1 month
Sponsored by: The FreeBSD Foundation

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable