freebsd-skq/sys/i386/ibcs2
emaste 444301c25e Fix kernel memory disclosure in ibcs2_getdents
ibcs2_getdents() copies a dirent structure to userland.  The ibcs2
dirent structure contains a 2 byte pad element.  This element is never
initialized, but copied to userland none-the-less.

Note that ibcs2 has not built on HEAD since r302095.

Submitted by:	Domagoj Stolfa <ds815@cam.ac.uk>
Reported by:	Ilja Van Sprundel <ivansprundel@ioactive.com>
MFC after:	3 days
Security:	Kernel memory disclosure (803)
2018-03-21 23:26:42 +00:00
..
coff.h
ibcs2_dirent.h
ibcs2_errno.c
ibcs2_errno.h
ibcs2_fcntl.c
ibcs2_fcntl.h
ibcs2_ioctl.c
ibcs2_ioctl.h
ibcs2_ipc.c Add ) missing from r330297 2018-03-21 23:17:26 +00:00
ibcs2_ipc.h
ibcs2_isc_syscall.h
ibcs2_isc_sysent.c
ibcs2_isc.c
ibcs2_misc.c Fix kernel memory disclosure in ibcs2_getdents 2018-03-21 23:26:42 +00:00
ibcs2_mount.h
ibcs2_msg.c
ibcs2_other.c
ibcs2_proto.h
ibcs2_signal.c
ibcs2_signal.h
ibcs2_socksys.c
ibcs2_socksys.h
ibcs2_stat.c
ibcs2_stat.h
ibcs2_statfs.h
ibcs2_stropts.h
ibcs2_syscall.h
ibcs2_sysent.c
ibcs2_sysi86.c
ibcs2_sysvec.c
ibcs2_termios.h
ibcs2_time.h
ibcs2_types.h
ibcs2_unistd.h
ibcs2_ustat.h
ibcs2_util.c
ibcs2_util.h
ibcs2_utime.h
ibcs2_utsname.h
ibcs2_xenix_syscall.h
ibcs2_xenix_sysent.c
ibcs2_xenix.c
ibcs2_xenix.h
imgact_coff.c
Makefile Don't use an .OBJDIR for 'make sysent'. 2018-01-29 19:14:15 +00:00
syscalls.conf
syscalls.isc
syscalls.isc.conf
syscalls.master Correct pseudo misspelling in sys/ comments 2018-02-23 18:15:50 +00:00
syscalls.xenix
syscalls.xenix.conf