git: 760b3f0b86a9 - releng/15.0 - compat32: Zero struct to avoid stack disclosure
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Tue, 30 Jun 2026 17:21:36 UTC
The branch releng/15.0 has been updated by markj:
URL: https://cgit.FreeBSD.org/src/commit/?id=760b3f0b86a91b774713b03305c6ebe5c18cb642
commit 760b3f0b86a91b774713b03305c6ebe5c18cb642
Author: Ed Maste <emaste@FreeBSD.org>
AuthorDate: 2026-03-11 15:02:18 +0000
Commit: Mark Johnston <markj@FreeBSD.org>
CommitDate: 2026-06-30 02:32:58 +0000
compat32: Zero struct to avoid stack disclosure
Approved by: so
Security: FreeBSD-SA-26:48.compat32
Security: CVE-2026-49425
Reported by: Adam Crosser, Praetorian
Reviewed by: philip
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D55811
(cherry picked from commit 097cb4e9f0432c543c704cec712ce1cd3302335c)
(cherry picked from commit 4551ea3b3f04650cd5300a9eae8994bdb080db91)
---
sys/compat/freebsd32/freebsd32_misc.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/sys/compat/freebsd32/freebsd32_misc.c b/sys/compat/freebsd32/freebsd32_misc.c
index e62c76924d22..f5e4321c7aa3 100644
--- a/sys/compat/freebsd32/freebsd32_misc.c
+++ b/sys/compat/freebsd32/freebsd32_misc.c
@@ -765,7 +765,7 @@ static int
freebsd32_kevent_copyout(void *arg, struct kevent *kevp, int count)
{
struct freebsd32_kevent_args *uap;
- struct kevent32 ks32[KQ_NEVENTS];
+ struct kevent32 ks32[KQ_NEVENTS] = {};
int i, error;
KASSERT(count <= KQ_NEVENTS, ("count (%d) > KQ_NEVENTS", count));