Date: Mon, 21 Jan 2019 09:27:46 -0800 From: Cy Schubert <Cy.Schubert@cschubert.com> To: Ed Maste <emaste@FreeBSD.org>, src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org Subject: Re: svn commit: r343262 - head/sys/amd64/linux Message-ID: <CE31DB81-1298-404F-8788-27C5DDE0C479@cschubert.com> In-Reply-To: <201901211625.x0LGPfBd047017@repo.freebsd.org> References: <201901211625.x0LGPfBd047017@repo.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On January 21, 2019 8:25:41 AM PST, Ed Maste <emaste@FreeBSD.org> wrote: >Author: emaste >Date: Mon Jan 21 16:25:40 2019 >New Revision: 343262 >URL: https://svnweb.freebsd.org/changeset/base/343262 > >Log: > linuxulator: fix stack memory disclosure in linux_sigaltstack > > admbugs: 765 > Reported by: Vlad Tsyrklevich <vlad@tsyrklevich.net> > Reviewed by: andrew > MFC after: 1 day > Security: Kernel memory disclosure > Sponsored by: The FreeBSD Foundation > >Modified: > head/sys/amd64/linux/linux_machdep.c > >Modified: head/sys/amd64/linux/linux_machdep.c >============================================================================== >--- head/sys/amd64/linux/linux_machdep.c Mon Jan 21 16:21:03 >2019 (r343261) >+++ head/sys/amd64/linux/linux_machdep.c Mon Jan 21 16:25:40 >2019 (r343262) >@@ -201,6 +201,7 @@ linux_sigaltstack(struct thread *td, struct >linux_siga > l_stack_t lss; > int error; > >+ memset(&lss, 0, sizeof(lss)); > LINUX_CTR2(sigaltstack, "%p, %p", uap->uss, uap->uoss); > > if (uap->uss != NULL) { Do we have a CVE for this? -- Pardon the typos and autocorrect, small keyboard in use. Cheers, Cy Schubert <Cy.Schubert@cschubert.com> FreeBSD UNIX: <cy@FreeBSD.org> Web: http://www.FreeBSD.org The need of the many outweighs the greed of the few.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CE31DB81-1298-404F-8788-27C5DDE0C479>