Page MenuHomeFreeBSD

netlink: Fully clear parser state between messages
ClosedPublic

Authored by des on Jul 30 2025, 1:36 PM.
Tags
None
Referenced Files
F168252714: D51634.diff
Thu, Aug 27, 4:55 AM
Unknown Object (File)
Wed, Aug 26, 5:18 AM
Unknown Object (File)
Tue, Aug 25, 9:44 PM
Unknown Object (File)
Tue, Aug 25, 3:03 PM
Unknown Object (File)
Sun, Aug 23, 1:24 AM
Unknown Object (File)
Sun, Aug 23, 12:30 AM
Unknown Object (File)
Sat, Aug 22, 11:07 AM
Unknown Object (File)
Sat, Aug 22, 10:36 AM
Subscribers

Details

Summary

Failing to reset the cookie between messages can lead to an attempt
to interpret a zeroed buffer as a struct nlattr, causing a length
calculation to underflow, resulting in a memcpy() call where the
length exceeds the actual size of the buffer.

MFC after: 1 week
PR: 283797

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 65846
Build 62729: arc lint + arc unit