]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
projects / FreeBSD / FreeBSD.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 434c46c) | patch
ktrace: Handle negative array sizes in ktrstructarray
authorMark Johnston <markj@FreeBSD.org>
Thu, 27 May 2021 19:49:12 +0000 (15:49 -0400)
committerMark Johnston <markj@FreeBSD.org>
Thu, 27 May 2021 19:52:20 +0000 (15:52 -0400)
commitf88510077377157008f648b7036e1d1c9c83ea23
tree152a2602a26e2730b8f7ace9965a16c2dd966059tree | snapshot
parent434c46c00602e16115cfb19344e4c45135b68b09commit | diff
ktrace: Handle negative array sizes in ktrstructarray

ktrstructarray() may be used to create copies of kevent(2) change and
event arrays.  It is called before parameter validation is done and so
should check for bogus array lengths before allocating a copy.

Reported by: syzkaller
Reviewed by: kib
MFC after: 1 week
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D30479
sys/kern/kern_ktrace.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.