Page MenuHomeFreeBSD

unix/*: check new control size in unp_internalize()
ClosedPublic

Authored by glebius on May 25 2022, 7:31 AM.
Tags
None
Referenced Files
F95904996: D35317.id106356.diff
Sun, Sep 22, 11:58 PM
F95904989: D35317.id106374.diff
Sun, Sep 22, 11:58 PM
F95904978: D35317.id.diff
Sun, Sep 22, 11:58 PM
F95903931: D35317.diff
Sun, Sep 22, 11:48 PM
Unknown Object (File)
Sun, Sep 22, 7:09 PM
Unknown Object (File)
Thu, Sep 19, 8:15 PM
Unknown Object (File)
Thu, Sep 19, 8:14 PM
Unknown Object (File)
Mon, Sep 16, 11:47 PM
Subscribers

Details

Summary

Now that we call sbcreatecontrol() with M_WAITOK, we are expected to
pass a valid size. Return same error code, we are returning for an
oversized control from sockargs().

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 45705
Build 42593: arc lint + arc unit

Event Timeline

markj added inline comments.
sys/kern/uipc_usrreq.c
2244
2249

I'm not sure this is truly insane. libcasper can provoke such situations.

This revision is now accepted and ready to land.May 25 2022, 7:43 PM