freebsd-dev/sys/i386/ibcs2
Ed Maste 24f2ef9bb9 Fix kernel memory disclosure in ibcs2_getdents
ibcs2_getdents() copies a dirent structure to userland.  The ibcs2
dirent structure contains a 2 byte pad element.  This element is never
initialized, but copied to userland none-the-less.

Note that ibcs2 has not built on HEAD since r302095.

Submitted by:	Domagoj Stolfa <ds815@cam.ac.uk>
Reported by:	Ilja Van Sprundel <ivansprundel@ioactive.com>
MFC after:	3 days
Security:	Kernel memory disclosure (803)
2018-03-21 23:26:42 +00:00
..
coff.h
ibcs2_dirent.h
ibcs2_errno.c
ibcs2_errno.h
ibcs2_fcntl.c
ibcs2_fcntl.h
ibcs2_ioctl.c
ibcs2_ioctl.h
ibcs2_ipc.c
ibcs2_ipc.h
ibcs2_isc_syscall.h
ibcs2_isc_sysent.c
ibcs2_isc.c
ibcs2_misc.c
ibcs2_mount.h
ibcs2_msg.c
ibcs2_other.c
ibcs2_proto.h
ibcs2_signal.c
ibcs2_signal.h
ibcs2_socksys.c
ibcs2_socksys.h
ibcs2_stat.c
ibcs2_stat.h
ibcs2_statfs.h
ibcs2_stropts.h
ibcs2_syscall.h
ibcs2_sysent.c
ibcs2_sysi86.c
ibcs2_sysvec.c
ibcs2_termios.h
ibcs2_time.h
ibcs2_types.h
ibcs2_unistd.h
ibcs2_ustat.h
ibcs2_util.c
ibcs2_util.h
ibcs2_utime.h
ibcs2_utsname.h
ibcs2_xenix_syscall.h
ibcs2_xenix_sysent.c
ibcs2_xenix.c
ibcs2_xenix.h
imgact_coff.c
Makefile
syscalls.conf
syscalls.isc
syscalls.isc.conf
syscalls.master
syscalls.xenix
syscalls.xenix.conf