HomeFreeBSD

MFC r309027:

Description

MFC r309027:

Allocate a struct ifreq rather than using a (wrong) computed size for
the BIOCSETIF ioctl.

The kernel always copies an entire struct ifreq and IPv4 addresses will
always fit in an ifreq.

On systems with pointers larger than 64-bits, the computed size will be
less than the size of struct ifreq, potentially resulting in the kernel
attempting to copyin memory from outside the allocation.

Reviewed by: jhb
Obtained from: CheriBSD
Sponsored by: DARPA, AFRL
Differential Revision: https://reviews.freebsd.org/D8445

Details

Provenance
brooksAuthored on
Reviewer
jhb
Differential Revision
D8445: Allocate a struct ifreq rather than using a computed size for the BIOCSETIF ioctl.
Parents
rS309304: MFC r309027:
Branches
Unknown
Tags
Unknown