svn commit: r350217 - stable/11/sys/compat/freebsd32

[Ed Maste]

Author: emaste
Date: Mon Jul 22 18:14:34 2019
New Revision: 350217
URL: https://svnweb.freebsd.org/changeset/base/350217

Log:
  Avoid kernel memory disclosure in freebsd32_ioctl_pciocgetconf
  
  This has been addressed in HEAD with other compat32 changes, but was not
  yet addressed in stable/11.
  
  admbugs:	797
  Reported by:	Ilja Van Sprundel <ivansprundel at ioactive.com>
  Security:	CVE-2019-5605
  Sponsored by:	The FreeBSD Foundation

Modified:
  stable/11/sys/compat/freebsd32/freebsd32_ioctl.c

Modified: stable/11/sys/compat/freebsd32/freebsd32_ioctl.c
==============================================================================
--- stable/11/sys/compat/freebsd32/freebsd32_ioctl.c	Mon Jul 22 18:11:35 2019	(r350216)
+++ stable/11/sys/compat/freebsd32/freebsd32_ioctl.c	Mon Jul 22 18:14:34 2019	(r350217)
@@ -262,6 +262,8 @@ freebsd32_ioctl_pciocgetconf(struct thread *td,
 	vm_offset_t addr;
 	int error;
 
+	memset(&pmc, 0, sizeof(pmc));
+	memset(&pc32, 0, sizeof(pc32));
 	if ((error = copyin(uap->data, &pci32, sizeof(pci32))) != 0)
 		return (error);