git: 815eb5a26eb4 - stable/13 - compat/linux: Avoid waitid() kernel stack disclosure
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Wed, 13 May 2026 14:19:35 UTC
The branch stable/13 has been updated by emaste:
URL: https://cgit.FreeBSD.org/src/commit/?id=815eb5a26eb45418bfd1ae564c532cbd37599b02
commit 815eb5a26eb45418bfd1ae564c532cbd37599b02
Author: Ed Maste <emaste@FreeBSD.org>
AuthorDate: 2026-03-10 13:53:46 +0000
Commit: Ed Maste <emaste@FreeBSD.org>
CommitDate: 2026-05-13 14:06:05 +0000
compat/linux: Avoid waitid() kernel stack disclosure
Reported by: Adam Crosser, Praetorian
Reviewed by: philip
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D55812
(cherry picked from commit 9a9f93bcf1aa0059d759b2f3ea6faeb2760a11bd)
(cherry picked from commit 9f8db9cc67fb86eeb2b645ce7f8aa748e99241a9)
(cherry picked from commit a347e6e20e75ad6224afefcf650ef738c3de094d)
---
sys/compat/linux/linux_misc.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/sys/compat/linux/linux_misc.c b/sys/compat/linux/linux_misc.c
index fa6b7eff601a..3895c6da057c 100644
--- a/sys/compat/linux/linux_misc.c
+++ b/sys/compat/linux/linux_misc.c
@@ -756,6 +756,7 @@ linux_common_wait(struct thread *td, idtype_t idtype, int id, int *statusp,
error = linux_copyout_rusage(&wru.wru_self, rup);
if (error == 0 && infop != NULL && td->td_retval[0] != 0) {
sig = bsd_to_linux_signal(siginfo.si_signo);
+ memset(&lsi, 0, sizeof(lsi));
siginfo_to_lsiginfo(&siginfo, &lsi, sig);
error = copyout(&lsi, infop, sizeof(lsi));
}