Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 21 Jan 2019 16:19:02 +0000 (UTC)
From:      Ed Maste <emaste@FreeBSD.org>
To:        src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org
Subject:   svn commit: r343260 - head/sys/compat/linux
Message-ID:  <201901211619.x0LGJ2OW041817@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: emaste
Date: Mon Jan 21 16:19:02 2019
New Revision: 343260
URL: https://svnweb.freebsd.org/changeset/base/343260

Log:
  linuxulator: fix stack memory disclosure in linux_ioctl_v4l
  
  admbugs:	765
  Reported by:	Vlad Tsyrklevich <vlad@tsyrklevich.net>
  Reviewed by:	andrew
  MFC after:	1 day
  Security:	Kernel stack memory disclosure
  Sponsored by:	The FreeBSD Foundation

Modified:
  head/sys/compat/linux/linux_ioctl.c

Modified: head/sys/compat/linux/linux_ioctl.c
==============================================================================
--- head/sys/compat/linux/linux_ioctl.c	Mon Jan 21 15:27:58 2019	(r343259)
+++ head/sys/compat/linux/linux_ioctl.c	Mon Jan 21 16:19:02 2019	(r343260)
@@ -2843,6 +2843,8 @@ linux_to_bsd_v4l_window(struct l_video_window *lvw, st
 static int
 bsd_to_linux_v4l_window(struct video_window *vw, struct l_video_window *lvw)
 {
+	memset(lvw, 0, sizeof(*lvw));
+
 	lvw->x = vw->x;
 	lvw->y = vw->y;
 	lvw->width = vw->width;



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201901211619.x0LGJ2OW041817>