Page MenuHomeFreeBSD

unix/*: check new control size in unp_internalize()
ClosedPublic

Authored by glebius on May 25 2022, 7:31 AM.
Tags
None
Referenced Files
F95904996: D35317.id106356.diff
Sun, Sep 22, 11:58 PM
F95904989: D35317.id106374.diff
Sun, Sep 22, 11:58 PM
F95904978: D35317.id.diff
Sun, Sep 22, 11:58 PM
F95903931: D35317.diff
Sun, Sep 22, 11:48 PM
F95824226: D35317.diff
Sun, Sep 22, 7:09 PM
Unknown Object (File)
Thu, Sep 19, 8:15 PM
Unknown Object (File)
Thu, Sep 19, 8:14 PM
Unknown Object (File)
Mon, Sep 16, 11:47 PM
Subscribers

Details

Summary

Now that we call sbcreatecontrol() with M_WAITOK, we are expected to
pass a valid size. Return same error code, we are returning for an
oversized control from sockargs().

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

markj added inline comments.
sys/kern/uipc_usrreq.c
2244
2249

I'm not sure this is truly insane. libcasper can provoke such situations.

This revision is now accepted and ready to land.May 25 2022, 7:43 PM