emaste
aa773f3e23
bhyve: avoid theoretical stack buffer overflow from integer overflow
...
Use the proper size_t type to match strlen's return type. This is not
exploitable in practice as this parses command line arguments, which
are limited to well below 2^31 bytes.
This is a minimal change to address the reported issue; hda_parse_config
and the rest of this file will benefit from further review.
Reported by: Fakhri Zulkifli
Reviewed by: jhb, markj
MFC after: 3 days
Sponsored by: The FreeBSD Foundation
2019-06-25 19:06:43 +00:00
..
2019-04-25 22:52:44 +00:00
2017-11-27 15:37:16 +00:00
2018-06-14 01:34:53 +00:00
2018-06-13 03:22:08 +00:00
2019-06-25 06:24:56 +00:00
2019-06-25 06:24:56 +00:00
2019-06-25 06:14:11 +00:00
2018-06-13 04:00:21 +00:00
2018-06-13 03:22:08 +00:00
2019-02-01 03:09:11 +00:00
2019-04-25 22:53:55 +00:00
2019-05-02 22:46:37 +00:00
2019-05-02 22:46:37 +00:00
2018-06-13 03:22:08 +00:00
2018-06-14 01:34:53 +00:00
2018-06-13 03:22:08 +00:00
2018-06-14 01:34:53 +00:00
2019-01-16 00:39:23 +00:00
2019-01-16 00:39:23 +00:00
2017-11-27 15:37:16 +00:00
2018-12-04 18:28:25 +00:00
2018-06-13 03:22:08 +00:00
2019-06-05 23:37:50 +00:00
2019-03-06 22:11:45 +00:00
2019-06-25 06:24:56 +00:00
2019-06-25 06:24:56 +00:00
2019-06-25 06:24:56 +00:00
2018-06-14 01:34:53 +00:00
2017-11-27 15:37:16 +00:00
2017-11-27 15:37:16 +00:00
2017-11-27 15:37:16 +00:00
2018-12-07 20:30:00 +00:00
2018-12-07 20:30:00 +00:00
2019-06-25 06:14:05 +00:00
2017-10-31 00:07:04 +00:00
2019-05-24 00:34:13 +00:00
2019-05-24 00:34:13 +00:00
2018-07-11 03:23:09 +00:00
2019-01-16 00:39:23 +00:00
2017-11-27 15:37:16 +00:00
2017-11-27 15:37:16 +00:00
2017-11-27 15:37:16 +00:00
2019-06-13 17:39:32 +00:00
2019-06-13 17:39:32 +00:00
2018-11-20 22:21:19 +00:00
2019-06-13 17:39:32 +00:00
2019-06-12 16:49:01 +00:00
2019-06-07 15:53:27 +00:00
2018-11-07 04:20:29 +00:00
2019-06-25 19:06:43 +00:00
2019-06-25 06:24:56 +00:00
2017-11-27 15:37:16 +00:00
2018-06-13 03:22:08 +00:00
2018-06-13 03:22:08 +00:00
2018-08-22 20:23:08 +00:00
2018-08-22 20:23:08 +00:00
2019-06-07 17:09:49 +00:00
2019-06-07 15:53:27 +00:00
2017-11-27 15:37:16 +00:00
2019-05-02 22:46:37 +00:00
2019-06-11 15:52:41 +00:00
2019-06-18 17:51:30 +00:00
2019-01-16 00:39:23 +00:00
2019-06-21 18:57:33 +00:00
2019-02-15 16:48:15 +00:00
2018-06-13 03:22:08 +00:00
2017-11-27 15:37:16 +00:00
2017-11-27 15:37:16 +00:00
2018-11-02 13:48:06 +00:00
2018-06-13 03:22:08 +00:00
2018-06-13 03:22:08 +00:00
2018-06-13 03:22:08 +00:00
2019-06-19 16:09:20 +00:00
2018-06-13 03:22:08 +00:00
2018-06-14 01:34:53 +00:00
2017-11-27 15:37:16 +00:00
2019-04-25 22:53:55 +00:00
2017-11-27 15:37:16 +00:00
2018-06-14 01:34:53 +00:00
2018-06-13 03:22:08 +00:00
2017-11-27 15:37:16 +00:00
2017-11-27 15:37:16 +00:00
2018-06-13 03:22:08 +00:00
2019-04-22 13:57:52 +00:00
2017-11-27 15:37:16 +00:00
2018-06-13 03:22:08 +00:00
2018-06-13 03:22:08 +00:00
2019-02-01 03:09:11 +00:00
2018-06-13 03:22:08 +00:00
2018-06-14 01:34:53 +00:00
2019-06-11 15:52:41 +00:00
2019-06-11 15:52:41 +00:00
2019-06-03 23:17:35 +00:00
2017-11-27 15:37:16 +00:00