Page MenuHomeFreeBSD

kern: zero out stack buffer after copying out random bits
ClosedPublic

Authored by kevans on Jul 15 2024, 3:56 PM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Apr 14, 8:03 PM
Unknown Object (File)
Sat, Apr 11, 1:02 PM
Unknown Object (File)
Sat, Apr 11, 10:17 AM
Unknown Object (File)
Sat, Apr 11, 2:24 AM
Unknown Object (File)
Tue, Mar 31, 9:40 PM
Unknown Object (File)
Mon, Mar 30, 4:58 PM
Unknown Object (File)
Sun, Mar 29, 3:36 PM
Unknown Object (File)
Tue, Mar 24, 3:20 AM
Subscribers

Details

Summary

The kern.arandom sysctl handler uses an intermediate buffer on the stack
to hold random data that it subsequently copies out to the sysctl
request. Err on the side of caution and zero out the stack buffer after
we're done with it to avoid a potential entropy leak later on.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 58650
Build 55538: arc lint + arc unit