tech-kern archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Brainy: two UAFs



In article <558E40EA.1030205%m00nbsd.net@localhost>,
Maxime Villard  <max%m00nbsd.net@localhost> wrote:
>Hi,
>I've been developing a new analysis engine for Brainy for some weeks
>now, and I've just updated the UAF catcher to use this new engine.
>
>Even though it still needs some work, it has just found two use-
>after-free:
> 1. double free in sys/dev/pci/if_et.c
> 2. beautiful UAF in sys/arch/pmax/tc/dt.c, the area is freed and
>    then inserted into a list for later use
>
>I can't test these patches: could someone review & ok them please?

All three are correct. Please commit them.

christos



Home | Main Index | Thread Index | Old Index