Page MenuHomeFreeBSD

netlink: Fully clear parser state between messages
ClosedPublic

Authored by des on Jul 30 2025, 1:36 PM.
Tags
None
Referenced Files
F148597408: D51634.id159492.diff
Thu, Mar 19, 1:23 AM
F148582239: D51634.id159492.diff
Wed, Mar 18, 10:49 PM
Unknown Object (File)
Tue, Mar 17, 2:11 AM
Unknown Object (File)
Sat, Mar 7, 9:58 PM
Unknown Object (File)
Fri, Mar 6, 10:02 PM
Unknown Object (File)
Wed, Mar 4, 9:34 AM
Unknown Object (File)
Sat, Feb 28, 6:29 PM
Unknown Object (File)
Sun, Feb 22, 4:28 PM
Subscribers

Details

Summary

Failing to reset the cookie between messages can lead to an attempt
to interpret a zeroed buffer as a struct nlattr, causing a length
calculation to underflow, resulting in a memcpy() call where the
length exceeds the actual size of the buffer.

MFC after: 1 week
PR: 283797

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 65846
Build 62729: arc lint + arc unit