Page MenuHomeFreeBSD

kern: zero out stack buffer after copying out random bits
ClosedPublic

Authored by kevans on Jul 15 2024, 3:56 PM.
Tags
None
Referenced Files
Unknown Object (File)
Wed, Feb 18, 11:53 PM
Unknown Object (File)
Sat, Feb 14, 6:14 PM
Unknown Object (File)
Jan 16 2026, 6:38 AM
Unknown Object (File)
Jan 14 2026, 11:36 AM
Unknown Object (File)
Jan 8 2026, 10:43 AM
Unknown Object (File)
Jan 6 2026, 2:37 AM
Unknown Object (File)
Dec 30 2025, 4:17 PM
Unknown Object (File)
Dec 14 2025, 7:20 AM
Subscribers

Details

Summary

The kern.arandom sysctl handler uses an intermediate buffer on the stack
to hold random data that it subsequently copies out to the sysctl
request. Err on the side of caution and zero out the stack buffer after
we're done with it to avoid a potential entropy leak later on.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 58650
Build 55538: arc lint + arc unit