Page MenuHomeFreeBSD

ktrace: Fix uninitialized memory disclosure
ClosedPublic

Authored by markj on Jan 17 2025, 2:21 PM.
Tags
None
Referenced Files
F137411405: D48499.id149538.diff
Sun, Nov 23, 5:11 AM
Unknown Object (File)
Fri, Nov 21, 4:21 AM
Unknown Object (File)
Mon, Nov 17, 9:51 PM
Unknown Object (File)
Fri, Nov 14, 5:29 PM
Unknown Object (File)
Fri, Nov 14, 5:18 PM
Unknown Object (File)
Fri, Nov 14, 4:34 PM
Unknown Object (File)
Fri, Nov 14, 4:26 PM
Unknown Object (File)
Mon, Nov 10, 3:40 PM
Subscribers

Details

Summary

The sockaddr passed to ktrcapfail() may be smaller than
sizeof(struct sockaddr), and the trailing bytes in the sockaddr
structure will be uninitialized, whereupon they get copied out to
userspace.

PR: 283673
Reported by: Yichen Chai <yichen.chai@gmail.com>
Reported by: Zhuo Ying Jiang Li <zyj20@cl.cam.ac.uk>
Fixes: 9bec84131215 ("ktrace: Record detailed ECAPMODE violations")

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 61783
Build 58667: arc lint + arc unit