HomeFreeBSD

Avoid kernel stack disclosure in compat32 stat

Description

Avoid kernel stack disclosure in compat32 stat

copy_stat and copy_ostat used by 32-bit compat *stat calls left spare
and padding bytes uninitialized.

This issue does not exist in stable/12 and later as it was incidentally
addressed as part of the 64-bit inode project.

Reported by: Reno Robert of Trend Micro Zero Day Initiative
Reviewed by: markj
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D34706

Details

Provenance
emasteAuthored on Mar 29 2022, 2:48 PM
Reviewer
markj
Differential Revision
D34706: Avoid kernel stack disclosure in compat32 stat
Parents
rG95dc52422893: openssl: MFC: Fix a bug in BN_mod_sqrt() that can cause it to loop forever.
Branches
Unknown
Tags
Unknown