Page MenuHomeFreeBSD

lio: Avoid out-of-bounds read or write MAC address
ClosedPublic

Authored by zlei on Dec 11 2025, 4:24 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sat, Feb 28, 3:47 AM
Unknown Object (File)
Fri, Feb 27, 12:20 PM
Unknown Object (File)
Tue, Feb 24, 2:06 PM
Unknown Object (File)
Sun, Feb 22, 3:06 PM
Unknown Object (File)
Fri, Feb 20, 8:16 PM
Unknown Object (File)
Wed, Feb 18, 12:26 PM
Unknown Object (File)
Wed, Feb 18, 11:42 AM
Unknown Object (File)
Wed, Feb 18, 11:42 AM
Subscribers

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

zlei requested review of this revision.Dec 11 2025, 4:24 PM

Good find.

sys/dev/liquidio/lio_main.c
1375–1376

Change 6 to ETHER_ADDR_LEN too?

This revision is now accepted and ready to land.Dec 14 2025, 5:15 PM
sys/dev/liquidio/lio_main.c
1375–1376

Actually this loop copying can be shortened by memcpy(). I'll update for better readability.

Replaced loop copying with memcpy() for better readability.

This revision now requires review to proceed.Dec 15 2025, 3:32 PM
This revision is now accepted and ready to land.Dec 15 2025, 9:26 PM

Good find.

Forgot to mention that I found this while hacking on a multicast filter bug related to qlnxe https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290973 . The driver qlnxe read multicast ethernet address with a length ETHER_HDR_LEN which is unnecessary long.