HomeFreeBSD

Reject ioctl commands for FLSHGCHR and FLSHPCHR if the size is greater

Description

Reject ioctl commands for FLSHGCHR and FLSHPCHR if the size is greater
than sc->areq. This is a bounds check to ensure we're not just cramming
arbitrarily sized nonsense into the driver and overflowing the heap.

PR: 209545
Submitted by: cturt@hardenedbsd.org
MFC after: 2 weeks

Details

Provenance
sbrunoAuthored on
Parents
rS300611: Mark all memory before the kernel as toxic to DTrace.
Branches
Unknown
Tags
Unknown