git: 9f8db9cc67fb - stable/15 - compat/linux: Avoid waitid() kernel stack disclosure
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Fri, 20 Mar 2026 13:36:45 UTC
The branch stable/15 has been updated by emaste:
URL: https://cgit.FreeBSD.org/src/commit/?id=9f8db9cc67fb86eeb2b645ce7f8aa748e99241a9
commit 9f8db9cc67fb86eeb2b645ce7f8aa748e99241a9
Author: Ed Maste <emaste@FreeBSD.org>
AuthorDate: 2026-03-10 13:53:46 +0000
Commit: Ed Maste <emaste@FreeBSD.org>
CommitDate: 2026-03-20 13:36:36 +0000
compat/linux: Avoid waitid() kernel stack disclosure
Reported by: Adam Crosser, Praetorian
Reviewed by: philip
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D55812
(cherry picked from commit 9a9f93bcf1aa0059d759b2f3ea6faeb2760a11bd)
---
sys/compat/linux/linux_misc.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/sys/compat/linux/linux_misc.c b/sys/compat/linux/linux_misc.c
index 69fb9935a9ae..937b010c8435 100644
--- a/sys/compat/linux/linux_misc.c
+++ b/sys/compat/linux/linux_misc.c
@@ -750,6 +750,7 @@ linux_common_wait(struct thread *td, idtype_t idtype, int id, int *statusp,
error = linux_copyout_rusage(&wru.wru_self, rup);
if (error == 0 && infop != NULL && td->td_retval[0] != 0) {
sig = bsd_to_linux_signal(siginfo.si_signo);
+ memset(&lsi, 0, sizeof(lsi));
siginfo_to_lsiginfo(&siginfo, &lsi, sig);
error = copyout(&lsi, infop, sizeof(lsi));
}