Page MenuHomeFreeBSD

kern: zero out stack buffer after copying out random bits
ClosedPublic

Authored by kevans on Jul 15 2024, 3:56 PM.
Tags
None
Referenced Files
F162849009: D45978.id140996.diff
Fri, Jul 17, 2:23 PM
Unknown Object (File)
Sun, Jul 12, 10:04 AM
Unknown Object (File)
Mon, Jun 29, 5:53 PM
Unknown Object (File)
Mon, Jun 29, 9:44 AM
Unknown Object (File)
Sun, Jun 28, 12:41 AM
Unknown Object (File)
Thu, Jun 25, 2:58 AM
Unknown Object (File)
Mon, Jun 22, 11:48 PM
Unknown Object (File)
Sun, Jun 21, 11:01 PM
Subscribers

Details

Summary

The kern.arandom sysctl handler uses an intermediate buffer on the stack
to hold random data that it subsequently copies out to the sysctl
request. Err on the side of caution and zero out the stack buffer after
we're done with it to avoid a potential entropy leak later on.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 58650
Build 55538: arc lint + arc unit