Page MenuHomeFreeBSD

dtrace: Fix DOF section-specific validation
ClosedPublic

Authored by markj on Tue, Jun 30, 9:15 PM.
Tags
None
Referenced Files
Unknown Object (File)
Wed, Jul 15, 7:28 AM
Unknown Object (File)
Wed, Jul 15, 7:28 AM
Unknown Object (File)
Tue, Jul 14, 11:40 AM
Unknown Object (File)
Mon, Jul 13, 6:12 AM
Unknown Object (File)
Sun, Jul 12, 11:04 AM
Unknown Object (File)
Sun, Jul 12, 11:04 AM
Unknown Object (File)
Sun, Jul 12, 12:39 AM
Unknown Object (File)
Sat, Jul 11, 6:26 PM
Subscribers

Details

Summary

The entry size of the probe section is assumed to be at least
sizeof(dof_probe_t) by the loop further below.

enoff_sec->dofs_entsize was not being validated at all.

When multiplying an index by a table entry size, make sure the
multiplication can't overflow.

Fix an off-by-one when validating the translated probe argument array.

Make sure that the probe argument argvs are valid string offsets
even if the argument count is zero.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 74436
Build 71319: arc lint + arc unit