HomeFreeBSD

ctl: avoid heap info leak in ctl_request_sense

Description

ctl: avoid heap info leak in ctl_request_sense

Previously 3 bytes of data from the heap could be leaked to ctl
consumers.

Reported by: Synacktiv
Reviewed by: asomers, mav
Sponsored by: The Alpha-Omega Project
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D46091

Details

Provenance
emasteAuthored on Aug 20 2024, 6:12 PM
Reviewer
asomers
Differential Revision
Restricted Differential Revision
Parents
rG1af7d5f38953: libfetch: don't include fragments in HTTP requests
Branches
Unknown
Tags
Unknown