d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

zfs_ioctl: avoid out-of-bound read

Browse Source 
admbugs:	796
Submitted by:	Domagoj Stolfa <ds815@cam.ac.uk>
Reported by:	Ilja Van Sprundel <ivansprundel@ioactive.com>
Reviewed by:	avg
MFC after:	1 day
This commit is contained in:
Ed Maste 2018-05-04 00:56:41 +00:00
parent b525a10ac0
commit 3804f572a3
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=333234
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
sys/cddl/contrib/opensolaris/uts/common/fs/zfs/zfs_ioctl.c
View File

@ -6440,6 +6440,10 @@ zfsdev_ioctl(struct cdev *dev, u_long zcmd, caddr_t arg, int flag,
cflag = ZFS_CMD_COMPAT_V28;
break;
case sizeof(zfs_cmd_v15_t):
if (cmd >= sizeof(zfs_ioctl_v15_to_v28) /
sizeof(zfs_ioctl_v15_to_v28[0]))
return (EINVAL);
cflag = ZFS_CMD_COMPAT_V15;
vecnum = zfs_ioctl_v15_to_v28[cmd];