Source-Changes-D archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: CVS commit: src/sys/net



In article <CAKrYomho5HREhJD0r=WHCpzrxEgY5rBpwv6j-nfDiTiNz_UWSg%mail.gmail.com@localhost>,
Ryota Ozaki  <ozaki-r%netbsd.org@localhost> wrote:
>On Tue, Apr 16, 2019 at 5:51 AM Christos Zoulas <christos%netbsd.org@localhost> wrote:
>>
>> Module Name:    src
>> Committed By:   christos
>> Date:           Mon Apr 15 20:51:46 UTC 2019
>>
>> Modified Files:
>>         src/sys/net: if.c
>>
>> Log Message:
>> Zero out the ifreq struct for SIOCGIFCONF to avoid up to 127 bytes of stack
>> disclosure. From Andy Nguyen, many thanks!
>
>Should we apply the same fix to all compat variants of ifconf?

Yup, good catch! Also pullups :-)

christos



Home | Main Index | Thread Index | Old Index