HomeFreeBSD

Use a sleepable lock for midistat functions.

Description

Use a sleepable lock for midistat functions.

Otherwise the mutex needs to be dropped when copying out the midistat
sbuf, leading to a race which allows one to read kernel memory beyond
the end of the sbuf buffer.

Reported and tested by: pho
Security: CVE-2019-5612

Details

Provenance
markjAuthored on
Parents
rS351261: Fix reference count overflow in mqueuefs.
Branches
Unknown
Tags
Unknown