HomeFreeBSD

ktrace: Handle negative array sizes in ktrstructarray

Description

ktrace: Handle negative array sizes in ktrstructarray

ktrstructarray() may be used to create copies of kevent(2) change and
event arrays. It is called before parameter validation is done and so
should check for bogus array lengths before allocating a copy.

Reported by: syzkaller
Reviewed by: kib
MFC after: 1 week
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D30479

Details

Provenance
markjAuthored on May 27 2021, 7:49 PM
Reviewer
kib
Differential Revision
D30479: ktrace: Handle negative array sizes in ktrstructarray
Parents
rG434c46c00602: rtwn_usb(4): Add a USB ID for the TP-Link Archer T2U v3.
Branches
Unknown
Tags
Unknown