git: 9a9f93bcf1aa - main - compat/linux: Avoid waitid() kernel stack disclosure
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Fri, 13 Mar 2026 00:30:38 UTC
The branch main has been updated by emaste:
URL: https://cgit.FreeBSD.org/src/commit/?id=9a9f93bcf1aa0059d759b2f3ea6faeb2760a11bd
commit 9a9f93bcf1aa0059d759b2f3ea6faeb2760a11bd
Author: Ed Maste <emaste@FreeBSD.org>
AuthorDate: 2026-03-10 13:53:46 +0000
Commit: Ed Maste <emaste@FreeBSD.org>
CommitDate: 2026-03-13 00:30:17 +0000
compat/linux: Avoid waitid() kernel stack disclosure
Reported by: Adam Crosser, Praetorian
Reviewed by: philip
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D55812
---
sys/compat/linux/linux_misc.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/sys/compat/linux/linux_misc.c b/sys/compat/linux/linux_misc.c
index 69fb9935a9ae..937b010c8435 100644
--- a/sys/compat/linux/linux_misc.c
+++ b/sys/compat/linux/linux_misc.c
@@ -750,6 +750,7 @@ linux_common_wait(struct thread *td, idtype_t idtype, int id, int *statusp,
error = linux_copyout_rusage(&wru.wru_self, rup);
if (error == 0 && infop != NULL && td->td_retval[0] != 0) {
sig = bsd_to_linux_signal(siginfo.si_signo);
+ memset(&lsi, 0, sizeof(lsi));
siginfo_to_lsiginfo(&siginfo, &lsi, sig);
error = copyout(&lsi, infop, sizeof(lsi));
}