Eric van Gyzen
4cf66812ea
nanosleep: plug a kernel memory disclosure
...
nanosleep() updates rmtp on EINVAL. In that case, kern_nanosleep()
has not updated rmt, so sys_nanosleep() updates the user-space rmtp
by copying garbage from its stack frame. This is not only a kernel
memory disclosure, it's also not POSIX-compliant. Fix it to update
rmtp only on EINTR.
Reviewed by: jilles (via D10020), dchagin
MFC after: 3 days
Security: possibly
Sponsored by: Dell EMC
Differential Revision: https://reviews.freebsd.org/D10044
2017-03-18 20:16:23 +00:00
..
2017-03-18 18:34:29 +00:00
2017-03-18 19:54:58 +00:00
2017-03-16 17:49:37 +00:00
2017-03-17 13:31:24 +00:00
2015-12-20 23:22:04 +00:00
2017-03-11 18:46:46 +00:00
2017-03-17 12:34:57 +00:00
2017-03-18 20:16:23 +00:00
2017-03-17 18:08:33 +00:00
2017-03-08 02:47:59 +00:00
2017-01-28 02:22:15 +00:00
2017-03-18 07:01:18 +00:00
2017-03-18 19:27:16 +00:00
2017-03-05 03:05:24 +00:00
2017-03-13 13:56:01 +00:00
2017-03-07 13:56:49 +00:00
2017-03-18 18:34:29 +00:00
2017-02-28 23:42:47 +00:00
2017-03-18 20:16:23 +00:00
2017-03-14 06:00:44 +00:00
2017-03-17 22:02:02 +00:00
2017-03-16 22:23:04 +00:00
2017-03-14 22:25:07 +00:00
2017-03-13 16:44:06 +00:00
2017-01-20 00:02:11 +00:00
2017-03-14 20:57:54 +00:00
2017-03-17 16:50:37 +00:00
2017-03-07 00:13:53 +00:00
2017-03-18 01:37:20 +00:00
2017-02-28 23:42:47 +00:00
2017-02-28 23:42:47 +00:00
2017-02-28 23:42:47 +00:00
2017-03-16 09:59:35 +00:00
2016-10-20 09:22:10 +00:00
2017-03-17 21:40:14 +00:00
2017-02-05 00:32:12 +00:00
2017-02-28 23:42:47 +00:00
2016-11-22 00:41:24 +00:00
2017-02-28 23:42:47 +00:00
2017-03-16 22:23:04 +00:00
2017-03-18 11:13:54 +00:00
2017-03-10 22:45:07 +00:00
2017-02-28 23:42:47 +00:00
2017-03-16 05:44:16 +00:00
2017-03-16 09:33:36 +00:00
2017-03-07 09:17:48 +00:00
2017-01-28 02:22:15 +00:00