d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
32e09b04ce
freebsd-dev/sys/dev/hptrr
History
Ed Maste 5d8501f487 hpt{nr,rr}: plug info leak in hpt_ioctl 
The hpt{nr,rr} ioctl handler allocates a buffer without M_ZERO and calls
hpt_do_ioctl(), which might not overwrite the entire buffer.

Also zero bytesReturned in case it is not written by hpt_do_ioctl().

The hpt27{nr,rr} device has permissions only for root so this is not urgent,
and the fix can be MFCd and considered for a future EN.

The same issue was reported in the hpt27xx driver by Ilja Van Sprundel.

Reviewed by:	jhb, kib
MFC after:	3 days
Sponsored by:	The FreeBSD Foundation
2018-01-02 18:31:32 +00:00
..
amd64-elf.hptrr_lib.o.uu
array.h sys/dev: further adoption of SPDX licensing ID tags. 2017-11-27 14:52:40 +00:00
him.h sys/dev: further adoption of SPDX licensing ID tags. 2017-11-27 14:52:40 +00:00
himfuncs.h sys/dev: further adoption of SPDX licensing ID tags. 2017-11-27 14:52:40 +00:00
hptintf.h sys/dev: further adoption of SPDX licensing ID tags. 2017-11-27 14:52:40 +00:00
hptrr_config.c sys/dev: further adoption of SPDX licensing ID tags. 2017-11-27 14:52:40 +00:00
hptrr_config.h sys/dev: further adoption of SPDX licensing ID tags. 2017-11-27 14:52:40 +00:00
hptrr_os_bsd.c sys/dev: further adoption of SPDX licensing ID tags. 2017-11-27 14:52:40 +00:00
hptrr_osm_bsd.c hpt{nr,rr}: plug info leak in hpt_ioctl 2018-01-02 18:31:32 +00:00
i386-elf.hptrr_lib.o.uu
ldm.h sys/dev: further adoption of SPDX licensing ID tags. 2017-11-27 14:52:40 +00:00
list.h sys/dev: further adoption of SPDX licensing ID tags. 2017-11-27 14:52:40 +00:00
os_bsd.h sys/dev: further adoption of SPDX licensing ID tags. 2017-11-27 14:52:40 +00:00
osm.h sys/dev: further adoption of SPDX licensing ID tags. 2017-11-27 14:52:40 +00:00