freebsd-skq/sys/ufs/ffs
Kirk McKusick 93440bbefd The binary representation of the superblock (the fs structure) is written
out verbatim to the disk: see ffs_sbput() in sys/ufs/ffs/ffs_subr.c.
It contains a pointer to the fs_summary_info structure. This pointer
value inadvertently causes garbage to be stored. It is garbage because
the pointer to the fs_summary_info structure is the address the then
current stack or heap. Although a mere pointer does not reveal anything
useful (like a part of a private key) to an attacker, garbage output
deteriorates reproducibility.

This commit zeros out the pointer to the fs_summary_info structure
before writing the out the superblock.

Reviewed by:  kib
Tested by:    Peter Holm
PR:           246983
Sponsored by: Netflix
2020-06-19 01:04:25 +00:00
..
ffs_alloc.c Further evaluation of the POSIX spec for fdatasync() shows that it 2020-06-05 01:00:55 +00:00
ffs_balloc.c Further evaluation of the POSIX spec for fdatasync() shows that it 2020-06-05 01:00:55 +00:00
ffs_extern.h Move all of the functions in ffs_subr.c that are only used by the ufs kernel 2020-06-17 23:39:52 +00:00
ffs_inode.c Clear the IN_SIZEMOD and IN_IBLKDATA flags only when doing a 2020-06-06 20:17:56 +00:00
ffs_rawread.c
ffs_snapshot.c Move the pointers stored in the superblock into a separate 2020-06-19 01:02:53 +00:00
ffs_softdep.c Further evaluation of the POSIX spec for fdatasync() shows that it 2020-06-05 01:00:55 +00:00
ffs_subr.c The binary representation of the superblock (the fs structure) is written 2020-06-19 01:04:25 +00:00
ffs_suspend.c
ffs_tables.c
ffs_vfsops.c The binary representation of the superblock (the fs structure) is written 2020-06-19 01:04:25 +00:00
ffs_vnops.c Further evaluation of the POSIX spec for fdatasync() shows that it 2020-06-05 01:00:55 +00:00
fs.h Move the pointers stored in the superblock into a separate 2020-06-19 01:02:53 +00:00
softdep.h This commit enables a UFS filesystem to do a forcible unmount when 2020-05-25 23:47:31 +00:00