From d3b778b791f4e4d8afc69698b2097efdf2f79de7 Mon Sep 17 00:00:00 2001 From: gordon Date: Thu, 27 Sep 2018 18:36:30 +0000 Subject: [PATCH] Fix small kernel memory disclosures. [EN-18:12.mem] Reported by: Thomas Barabosch, Fraunhofer FKIE Approved by: so Security: FreeBSD-EN-18:12.mem Security: CVE-2018-17155 --- sys/kern/kern_context.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/sys/kern/kern_context.c b/sys/kern/kern_context.c index 70751d02cba..acd3ded2a20 100644 --- a/sys/kern/kern_context.c +++ b/sys/kern/kern_context.c @@ -68,6 +68,7 @@ sys_getcontext(struct thread *td, struct getcontext_args *uap) if (uap->ucp == NULL) ret = EINVAL; else { + bzero(&uc, sizeof(ucontext_t)); get_mcontext(td, &uc.uc_mcontext, GET_MC_CLEAR_RET); PROC_LOCK(td->td_proc); uc.uc_sigmask = td->td_sigmask; @@ -108,6 +109,7 @@ sys_swapcontext(struct thread *td, struct swapcontext_args *uap) if (uap->oucp == NULL || uap->ucp == NULL) ret = EINVAL; else { + bzero(&uc, sizeof(ucontext_t)); get_mcontext(td, &uc.uc_mcontext, GET_MC_CLEAR_RET); bzero(uc.__spare__, sizeof(uc.__spare__)); PROC_LOCK(td->td_proc); -- 2.45.0