Mark Johnston
60a92c781d
Impose a limit on the number of GEOM_CTL arguments.
...
Otherwise a privileged user can trigger a memory allocation of
unbounded size, or an integer overflow in the subsequent
geom_alloc_copyin() call, leading to out-of-bounds accesses.
Hard-code a large limit to circumvent this problem.
admbug: 854
Reported by: Anonymous of the Shellphish Grill Team
Reviewed by: ae
MFC after: 1 week
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D19251
2019-02-19 21:22:22 +00:00
..
2018-04-10 19:18:16 +00:00
2018-04-10 19:18:16 +00:00
2019-01-02 15:52:16 +00:00
2018-10-27 03:37:14 +00:00
2018-07-13 07:08:06 +00:00
2018-12-06 00:09:39 +00:00
2018-12-06 00:09:39 +00:00
2018-04-10 19:18:16 +00:00
2019-01-23 16:44:21 +00:00
2018-04-10 19:18:16 +00:00
2018-04-10 19:18:16 +00:00
2018-10-27 16:14:42 +00:00
2018-11-27 14:58:19 +00:00
2019-01-02 15:52:16 +00:00
2018-04-10 19:18:16 +00:00
2017-11-27 15:17:37 +00:00
2018-04-10 19:18:16 +00:00
2018-10-27 16:14:42 +00:00
2019-01-26 17:17:25 +00:00
2018-04-10 19:18:16 +00:00
2018-04-10 19:18:16 +00:00
2018-04-10 19:18:16 +00:00
2017-11-27 15:17:37 +00:00
2018-04-10 19:18:16 +00:00
2018-04-10 19:18:16 +00:00
2019-02-19 21:22:22 +00:00
2017-11-27 15:17:37 +00:00
2018-12-27 19:15:24 +00:00
2018-01-15 11:20:00 +00:00
2018-10-27 16:14:42 +00:00
2018-10-27 16:14:42 +00:00
2017-12-31 09:23:52 +00:00
2017-11-27 15:17:37 +00:00
2018-04-10 19:18:16 +00:00
2017-11-27 15:17:37 +00:00
2018-11-07 16:28:09 +00:00
2017-11-27 15:17:37 +00:00
2018-04-10 19:18:16 +00:00
2017-11-27 15:17:37 +00:00
2018-04-10 19:18:16 +00:00
2018-10-27 16:14:42 +00:00
2017-11-27 15:17:37 +00:00
2017-11-27 15:17:37 +00:00
2018-10-27 16:14:42 +00:00
2017-11-27 15:17:37 +00:00
2018-04-10 19:18:16 +00:00
2017-11-27 15:17:37 +00:00
2017-11-27 15:17:37 +00:00
2018-04-10 19:18:16 +00:00
2018-10-27 16:14:42 +00:00