Bjoern A. Zeeb
1b786d0191
kern_jail: missing \0 termination check on osrelease parameter
...
If a user spplies a non-\0 terminated osrelease parameter reading it back
may disclose kernel memory.
This is a problem in case of nested jails (children.max > 0, which is not
the default). Otherwise root outside the jail has access to kernel memory
by other means and root inside a jail cannot create a child jail.
Add the proper \0 check at the end of a supplied osrelease parameter and
make sure any copies of the field will be \0-terminated.
Submitted by: Hans Christian Woithe (chwoithe yahoo.com)
MFC after: 3 days
2020-03-14 14:04:55 +00:00
..
2020-02-26 16:22:28 +00:00
2020-02-12 18:59:00 +00:00
2019-10-29 17:28:25 +00:00
2020-01-03 22:29:58 +00:00
2020-02-26 14:26:36 +00:00
2020-02-26 14:26:36 +00:00
2018-11-29 21:00:56 +00:00
2020-01-30 20:05:05 +00:00
2020-02-20 16:58:57 +00:00
2020-02-26 14:26:36 +00:00
2020-01-30 20:05:05 +00:00
2020-02-26 14:26:36 +00:00
2020-01-30 20:05:05 +00:00
2020-02-26 14:26:36 +00:00
2018-11-26 20:56:05 +00:00
2020-02-26 14:26:36 +00:00
2019-12-13 09:32:16 +00:00
2020-01-03 22:29:58 +00:00
2020-03-08 00:23:36 +00:00
2019-10-14 13:04:04 +00:00
2019-09-12 14:34:46 +00:00
2020-02-26 14:26:36 +00:00
2020-02-15 01:30:13 +00:00
2020-03-04 19:52:34 +00:00
2020-02-03 17:35:11 +00:00
2020-02-26 14:26:36 +00:00
2020-02-26 14:26:36 +00:00
2020-02-26 14:26:36 +00:00
2020-01-30 20:05:05 +00:00
2020-02-26 14:26:36 +00:00
2020-03-14 14:04:55 +00:00
2020-02-26 14:26:36 +00:00
2020-01-30 20:05:05 +00:00
2020-02-26 14:26:36 +00:00
2020-02-26 14:26:36 +00:00
2020-03-08 00:23:36 +00:00
2020-02-14 11:21:28 +00:00
2020-01-30 20:05:05 +00:00
2019-08-21 23:43:58 +00:00
2018-12-07 16:11:45 +00:00
2020-02-26 14:26:36 +00:00
2020-02-26 14:26:36 +00:00
2020-02-26 14:26:36 +00:00
2020-01-30 20:05:05 +00:00
2020-02-26 14:26:36 +00:00
2020-02-26 14:26:36 +00:00
2019-01-15 01:02:16 +00:00
2020-02-26 14:26:36 +00:00
2020-02-26 14:26:36 +00:00
2020-02-13 22:22:15 +00:00
2020-02-26 14:26:36 +00:00
2019-09-03 18:56:25 +00:00
2020-02-26 14:26:36 +00:00
2020-02-26 14:26:36 +00:00
2019-09-15 02:59:53 +00:00
2020-02-15 18:48:38 +00:00
2020-01-30 20:05:05 +00:00
2020-02-12 11:17:18 +00:00
2020-02-26 14:26:36 +00:00
2020-03-13 18:38:28 +00:00
2019-12-02 22:38:25 +00:00
2020-03-12 21:26:36 +00:00
2020-03-10 20:25:03 +00:00
2020-02-26 14:26:36 +00:00
2020-02-26 14:26:36 +00:00
2020-03-02 15:30:52 +00:00
2019-12-11 15:52:29 +00:00
2020-02-10 20:53:59 +00:00
2020-02-26 14:26:36 +00:00
2020-02-26 14:26:36 +00:00
2020-02-29 18:41:48 +00:00
2020-02-04 21:02:08 +00:00
2019-12-13 21:03:12 +00:00
2020-01-30 20:05:05 +00:00
2020-03-02 15:30:52 +00:00
2019-06-19 15:36:02 +00:00
2018-12-04 16:48:47 +00:00
2020-01-30 20:05:05 +00:00
2020-02-23 03:32:16 +00:00
2019-06-25 16:39:25 +00:00
2020-02-12 19:06:34 +00:00
2019-09-30 20:58:29 +00:00
2020-02-26 14:26:36 +00:00
2020-03-02 15:30:52 +00:00
2020-03-02 15:30:52 +00:00
2019-05-13 23:37:44 +00:00
2018-12-11 19:32:16 +00:00
2020-01-30 20:05:05 +00:00
2020-01-03 18:29:20 +00:00
2020-01-30 20:05:05 +00:00
2019-04-18 22:52:12 +00:00
2020-01-30 20:05:05 +00:00
2019-06-29 00:48:33 +00:00
2020-02-26 14:26:36 +00:00
2018-10-30 18:26:34 +00:00
2020-02-15 01:30:27 +00:00
2020-01-30 20:05:05 +00:00
2020-02-20 23:53:48 +00:00
2020-03-06 19:09:01 +00:00
2020-02-14 23:18:03 +00:00
2020-01-30 20:05:05 +00:00
2019-12-20 03:40:53 +00:00
2020-02-26 14:26:36 +00:00
2019-03-12 05:10:41 +00:00
2020-02-26 14:26:36 +00:00
2019-05-21 20:38:48 +00:00
2020-01-30 20:05:05 +00:00
2020-01-30 20:05:05 +00:00
2019-11-28 08:47:36 +00:00
2020-02-11 18:48:07 +00:00
2020-01-30 20:05:05 +00:00
2020-01-30 20:05:05 +00:00
2020-02-26 14:26:36 +00:00
2020-03-02 15:30:52 +00:00
2020-02-26 14:26:36 +00:00
2020-02-26 14:26:36 +00:00
2020-03-06 19:09:01 +00:00
2019-04-06 21:56:24 +00:00
2019-05-20 00:38:23 +00:00
2020-01-12 06:07:54 +00:00
2020-02-26 14:26:36 +00:00
2019-02-20 09:38:19 +00:00
2020-02-26 14:26:36 +00:00
2020-02-26 14:26:36 +00:00
2020-01-30 20:05:05 +00:00
2019-08-16 19:46:22 +00:00
2019-06-29 00:48:33 +00:00
2020-02-26 14:26:36 +00:00
2020-02-26 14:26:36 +00:00
2020-03-06 19:10:00 +00:00
2019-09-25 18:26:31 +00:00
2020-02-26 14:26:36 +00:00
2020-02-28 17:05:04 +00:00
2020-02-11 18:48:07 +00:00
2019-09-26 07:19:26 +00:00
2020-03-10 20:04:38 +00:00
2020-02-26 14:26:36 +00:00
2020-02-03 17:35:11 +00:00
2020-01-30 20:05:05 +00:00
2020-02-19 08:17:27 +00:00
2020-02-26 14:26:36 +00:00
2020-02-15 01:30:27 +00:00
2020-02-03 22:27:55 +00:00
2020-01-12 23:52:16 +00:00
2020-03-09 23:40:25 +00:00
2019-11-25 18:33:21 +00:00
2020-01-30 20:05:05 +00:00
2020-02-26 14:26:36 +00:00
2020-02-20 16:58:57 +00:00
2020-02-20 16:58:19 +00:00
2020-02-20 16:58:57 +00:00
2019-05-04 19:05:30 +00:00
2020-01-30 20:05:05 +00:00
2020-02-15 23:19:23 +00:00
2020-01-30 20:05:05 +00:00
2020-01-31 15:43:33 +00:00
2019-11-29 03:56:01 +00:00
2019-05-20 00:38:23 +00:00
2018-10-20 18:31:36 +00:00
2020-02-03 22:27:55 +00:00
2020-02-26 14:26:36 +00:00
2020-01-15 03:34:21 +00:00
2020-03-09 13:44:51 +00:00
2019-11-06 22:40:19 +00:00
2020-02-26 14:26:36 +00:00
2020-02-26 14:26:36 +00:00
2018-12-11 19:32:16 +00:00
2020-03-03 00:28:37 +00:00
2020-02-26 14:26:36 +00:00
2020-02-26 14:26:36 +00:00
2019-08-11 19:16:07 +00:00
2020-02-26 14:26:36 +00:00
2020-02-15 01:28:42 +00:00
2020-02-26 14:26:36 +00:00
2020-03-05 15:52:34 +00:00
2020-03-06 19:10:00 +00:00
2020-01-30 20:05:05 +00:00
2020-02-14 11:56:50 +00:00
2018-11-23 22:24:59 +00:00
2020-02-15 01:28:42 +00:00
2020-01-11 22:56:20 +00:00
2020-01-30 20:05:05 +00:00
2020-03-01 21:54:28 +00:00
2020-02-12 11:18:12 +00:00
2020-03-01 21:53:46 +00:00
2020-03-06 18:41:37 +00:00
2020-02-15 01:28:42 +00:00
2020-02-23 03:32:11 +00:00
2020-02-23 03:32:11 +00:00