f0645b3a06
Each control message region must be aligned on a 4-byte boundary on 32-bit architectures. The 32-bit compat shim for recvmsg() gets the actual layout right, but doesn't pad the payload length when computing msg_controllen for the output message header. If a control message contains an unaligned payload, such as the 1-byte TTL field in the example attached to PR 236737, this can produce control message payload boundaries that extend beyond the boundary reported by msg_controllen. PR: 236737 Reported by: Yuval Pavel Zholkover <paulzhol@gmail.com> Reviewed by: markj MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D19768 |
||
---|---|---|
.. | ||
freebsd32_capability.c | ||
freebsd32_ioctl.c | ||
freebsd32_ioctl.h | ||
freebsd32_ipc.h | ||
freebsd32_misc.c | ||
freebsd32_misc.h | ||
freebsd32_proto.h | ||
freebsd32_signal.h | ||
freebsd32_syscall.h | ||
freebsd32_syscalls.c | ||
freebsd32_sysent.c | ||
freebsd32_systrace_args.c | ||
freebsd32_util.h | ||
freebsd32.h | ||
Makefile | ||
syscalls.conf | ||
syscalls.master |