Bjoern A. Zeeb 1b786d0191 kern_jail: missing \0 termination check on osrelease parameter
If a user spplies a non-\0 terminated osrelease parameter reading it back
may disclose kernel memory.
This is a problem in case of nested jails (children.max > 0, which is not
the default).  Otherwise root outside the jail has access to kernel memory
by other means and root inside a jail cannot create a child jail.

Add the proper \0 check at the end of a supplied osrelease parameter and
make sure any copies of the field will be \0-terminated.

Submitted by:	Hans Christian Woithe (chwoithe yahoo.com)
MFC after:	3 days
2020-03-14 14:04:55 +00:00
..
2020-02-26 16:22:28 +00:00
2020-02-15 01:30:13 +00:00
2020-02-03 17:35:11 +00:00
2019-09-03 18:56:25 +00:00
2020-03-02 15:30:52 +00:00
2020-03-02 15:30:52 +00:00
2020-02-23 03:32:16 +00:00
2020-03-02 15:30:52 +00:00
2020-03-02 15:30:52 +00:00
2020-02-15 01:30:27 +00:00
2019-03-12 05:10:41 +00:00
2020-03-02 15:30:52 +00:00
2019-02-20 09:38:19 +00:00
2020-02-03 17:35:11 +00:00
2020-02-15 01:30:27 +00:00
2020-01-12 23:52:16 +00:00
2020-02-20 16:58:19 +00:00
2020-02-15 01:28:42 +00:00
2020-02-15 01:28:42 +00:00
2020-02-12 11:18:12 +00:00
2020-02-15 01:28:42 +00:00
2020-02-23 03:32:11 +00:00
2020-02-23 03:32:11 +00:00