In every mpr and mps ioctl that copies kernel data to userland, validate that the requested length does not exceed the size of the kernel's buffer. Note that all of these ioctls already required root access. MFC after: 2 weeks Sponsored by: Axcient Reviewed by: imp Differential Revision: https://reviews.freebsd.org/D38842 |
||
---|---|---|
.. | ||
mpi | ||
mpr_config.c | ||
mpr_ioctl.h | ||
mpr_mapping.c | ||
mpr_mapping.h | ||
mpr_pci.c | ||
mpr_sas_lsi.c | ||
mpr_sas.c | ||
mpr_sas.h | ||
mpr_table.c | ||
mpr_table.h | ||
mpr_user.c | ||
mpr.c | ||
mprvar.h |