Page MenuHomeFreeBSD

Avoid kernel stack disclosure in compat32 stat
ClosedPublic

Authored by emaste on Mar 29 2022, 2:53 PM.
Tags
None
Referenced Files
F102966691: D34706.diff
Tue, Nov 19, 7:31 AM
F102897873: D34706.id.diff
Mon, Nov 18, 11:32 AM
F102895414: D34706.id.diff
Mon, Nov 18, 10:47 AM
Unknown Object (File)
Tue, Nov 12, 6:09 AM
Unknown Object (File)
Tue, Nov 12, 4:10 AM
Unknown Object (File)
Mon, Nov 11, 12:12 PM
Unknown Object (File)
Oct 17 2024, 10:28 AM
Unknown Object (File)
Oct 16 2024, 3:20 PM
Subscribers

Details

Summary
copy_stat and copy_ostat used by 32-bit compat *stat calls left some
padding bytes uninitialized.

This issue does not exist in stable/12 and later as it was incidentally
addressed as part of the 64-bit inode project.

Reported by:    Reno Robert, Trend Micro Zero Day Initiative
Sponsored by:   The FreeBSD Foundation

Diff Detail

Lint
Lint Skipped
Unit
Tests Skipped