Jessica Clarke
a98fa52ec6
kldxref: Avoid buffer overflows in parse_pnp_list ...
We convert a string like "W32:vendor/device" into "I:vendor;I:device",
where the output is longer than the input, but only allocate space equal
to the length of the input, leading to a buffer overflow.
Instead use open_memstream so we get a safe dynamically-grown buffer.
Found by: CHERI
Reviewed by: imp, jhb (mentor)
Approved by: imp, jhb (mentor)
Obtained from: CheriBSD
Differential Revision: https://reviews.freebsd.org/D26637
2020-10-15 18:03:14 +00:00
2020-06-30 21:40:34 +00:00
2020-07-13 15:06:29 +00:00
2020-10-03 19:05:13 +00:00
2020-09-17 18:06:57 +00:00
2020-10-07 20:31:13 +00:00
2020-07-08 03:57:47 +00:00
2020-09-26 16:27:09 +00:00
2020-10-09 00:16:26 +00:00
2020-10-09 19:12:44 +00:00
2020-10-09 19:12:44 +00:00
2020-09-15 17:13:29 +00:00
2020-10-01 08:57:36 +00:00
2020-10-05 20:57:44 +00:00
2020-10-09 14:03:45 +00:00
2020-10-13 18:00:23 +00:00
2020-10-10 14:36:16 +00:00
2020-09-24 19:12:03 +00:00
2020-08-17 05:57:22 +00:00
2020-08-26 14:02:38 +00:00
2020-09-25 18:20:45 +00:00
2020-10-09 14:03:45 +00:00
2020-09-04 04:31:56 +00:00
2020-09-19 02:15:56 +00:00
2020-08-25 02:21:27 +00:00
2020-08-24 16:45:23 +00:00
2020-10-09 14:03:45 +00:00
2020-10-01 01:10:51 +00:00
2020-10-09 14:33:09 +00:00
2020-08-27 17:04:55 +00:00
2020-10-15 18:03:14 +00:00
2020-06-29 18:06:00 +00:00
2020-09-17 19:41:10 +00:00
2020-10-09 19:12:44 +00:00
2020-10-10 00:01:40 +00:00
2020-10-09 19:12:44 +00:00
2020-10-09 14:03:45 +00:00
2020-10-04 17:07:13 +00:00
2020-08-03 18:08:10 +00:00
2020-08-17 10:25:02 +00:00
2020-07-11 19:44:12 +00:00
2020-09-23 02:37:27 +00:00
2020-09-30 21:12:14 +00:00
2020-09-09 19:07:34 +00:00
2020-07-22 17:33:35 +00:00
2020-09-01 15:52:18 +00:00
2020-08-17 10:51:03 +00:00
2020-10-09 14:03:45 +00:00
2020-10-10 14:38:01 +00:00
2020-09-09 00:39:47 +00:00
2020-07-11 18:24:16 +00:00
2020-10-01 01:10:51 +00:00
2020-08-11 16:46:38 +00:00
2020-09-25 07:55:08 +00:00
2020-08-25 16:09:23 +00:00
2020-07-24 16:58:13 +00:00
2020-07-15 18:28:54 +00:00
2020-06-30 16:49:43 +00:00
2020-08-21 09:48:00 +00:00
2020-10-09 15:19:29 +00:00
2020-10-14 00:01:17 +00:00
2020-08-07 16:04:10 +00:00
2020-08-24 18:17:13 +00:00
2020-09-18 17:17:46 +00:00
2020-08-06 20:31:50 +00:00
2020-09-11 13:28:37 +00:00
2020-10-09 19:12:44 +00:00
2020-07-14 05:33:23 +00:00
2020-09-18 17:17:46 +00:00
a98fa52ec6