Skip site navigation (1)Skip section navigation (2) 
Date:      Fri, 02 Nov 2018 22:49:18 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 232920] linuxulator: linux_to_bsd_sockaddr and bsd_to_linux_sockaddr are unsafe
Message-ID:  <bug-232920-227@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help 

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232920

            Bug ID: 232920
           Summary: linuxulator: linux_to_bsd_sockaddr and
                    bsd_to_linux_sockaddr are unsafe
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: brooks@FreeBSD.org

The bsd_to_linux_sockaddr() and linux_to_bsd_sockaddr() functions alter the
userspace sockaddr to convert the format between linux and BSD versions.  If
the sockaddr is shared between concurrent syscalls or the pages are unwritable
these functions will fail.

Code should either be altered to perform the transformation purely in the
kernel or at a minimum, copyout_map should be used to allocated a new location
for the transformed sockaddr.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-232920-227>