freebsd-dev/sys
Ed Maste b72236b407 nandsim: correct test to avoid out-of-bounds access
Previously nandsim_chip_status returned EINVAL iff both of user-provided
chip->ctrl_num and chip->num were out of bounds.  If only one failed the
bounds check arbitrary memory would be read and returned.

The NAND framework is not built by default, nandsim is not intended for
production use (it is a simulator), and the nandsim device has root-only
permissions.

admbugs:	827
Reported by:	Daniel Hodson of elttam
MFC after:	3 days
Security:	kernel information leak or DoS
Sponsored by:	The FreeBSD Foundation
2019-06-21 13:42:40 +00:00
..
amd64 sys: Remove DEV_RANDOM device option 2019-06-21 00:16:30 +00:00
arm sys: Remove DEV_RANDOM device option 2019-06-21 00:16:30 +00:00
arm64 sys: Remove DEV_RANDOM device option 2019-06-21 00:16:30 +00:00
bsm Create new EINTEGRITY error with message "Integrity check failed". 2019-01-17 06:35:45 +00:00
cam SPC-3 and up require some UAs to be returned as fixed. 2019-06-20 22:20:30 +00:00
cddl Minimize aggsum_compare(&arc_size, arc_c) calls. 2019-06-14 20:04:28 +00:00
compat Replace uses of vm_page_unwire(m, PQ_NONE) with vm_page_unwire_noq(m). 2019-06-07 18:23:29 +00:00
conf sys: Remove DEV_RANDOM device option 2019-06-21 00:16:30 +00:00
contrib Make ipf_objbytes a constant. ipf_objbytes is a table of internal data 2019-06-17 20:10:55 +00:00
crypto aesni(4): Fix trivial type typo 2019-05-27 00:47:51 +00:00
ddb Extract eventfilter declarations to sys/_eventfilter.h 2019-05-20 00:38:23 +00:00
dev nandsim: correct test to avoid out-of-bounds access 2019-06-21 13:42:40 +00:00
dts arm64: Add support for NanoPI NEO2 2019-05-02 12:56:13 +00:00
fs fcntl: fix overflow when setting F_READAHEAD 2019-06-20 23:07:20 +00:00
gdb
geom Use sbuf_cat() in GEOM confxml generation. 2019-06-19 15:36:02 +00:00
gnu dts: Import files from Linux 5.1 2019-05-08 19:27:30 +00:00
i386 sys: Remove DEV_RANDOM device option 2019-06-21 00:16:30 +00:00
isa
kern fcntl: fix overflow when setting F_READAHEAD 2019-06-20 23:07:20 +00:00
kgssapi Make the warning intervals for deprecated crypto algorithms tunable. 2019-06-11 23:00:55 +00:00
libkern Separate kernel crc32() implementation to its own header (gsb_crc32.h) and 2019-06-17 19:49:08 +00:00
mips sys: Remove DEV_RANDOM device option 2019-06-21 00:16:30 +00:00
modules Add ACPI support for USB driver. 2019-06-17 23:03:30 +00:00
net V_ip6_forwarding and V_ipforwarding have been defined in ip6_var.h / 2019-06-19 08:49:24 +00:00
net80211 Enhance the comment ieee80211_add_channel() to avoid a 2019-06-10 14:31:18 +00:00
netgraph Remove 'dir' argument in ng_ipfw_input, since ip_fw_args now has this info. 2019-03-14 22:30:05 +00:00
netinet Add "tcpmss" opcode to match the TCP MSS value. 2019-06-21 10:54:51 +00:00
netinet6 Sort opt_foo.h #includes and add a missing blank line in ip_output(). 2019-06-11 22:07:39 +00:00
netipsec Make the warning intervals for deprecated crypto algorithms tunable. 2019-06-11 23:00:55 +00:00
netpfil Add "tcpmss" opcode to match the TCP MSS value. 2019-06-21 10:54:51 +00:00
netsmb Remove unused argument to priv_check_cred. 2018-12-11 19:32:16 +00:00
nfs
nfsclient
nfsserver
nlm
ofed Fix prio vs. nonprio tagged traffic in RDMACM 2019-06-04 06:21:31 +00:00
opencrypto Move declaration of warninterval out from under COMPAT_FREEBSD32. 2019-06-11 23:28:07 +00:00
powerpc sys: Remove DEV_RANDOM device option 2019-06-21 00:16:30 +00:00
riscv sys: Remove DEV_RANDOM device option 2019-06-21 00:16:30 +00:00
rpc Fix malloc stats for the RPCSEC_GSS server code when DEBUG is enabled. 2019-04-04 01:23:06 +00:00
security Extract eventfilter declarations to sys/_eventfilter.h 2019-05-20 00:38:23 +00:00
sparc64 sys: Remove DEV_RANDOM device option 2019-06-21 00:16:30 +00:00
sys sys: Remove DEV_RANDOM device option 2019-06-21 00:16:30 +00:00
teken Attempt to complete fixing programmable function keys for syscons. 2019-02-20 02:14:41 +00:00
tests Regularize the Netflix copyright 2019-02-04 21:28:25 +00:00
tools Add SDIO support. 2019-06-08 16:26:56 +00:00
ufs Add FIOBMAP2 ioctl 2019-06-20 14:13:10 +00:00
vm Extend mmap/mprotect API to specify the max page protections. 2019-06-20 18:24:16 +00:00
x86 Currently, MCA entries remain on an every-growing linked list. This means 2019-06-08 18:26:48 +00:00
xdr
xen xen: introduce a new way to setup event channel upcall 2019-01-30 11:34:52 +00:00
Makefile