Date: Sun, 19 Mar 2000 13:33:19 -0800 (PST) From: alo@iki.fi To: freebsd-gnats-submit@FreeBSD.org Subject: kern/17492: There is a bug in SIOCGIFCONF ioctl code Message-ID: <200003192133.NAA69460@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 17492 >Category: kern >Synopsis: There is a bug in SIOCGIFCONF ioctl code >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sun Mar 19 13:40:01 PST 2000 >Closed-Date: >Last-Modified: >Originator: Antti Louko >Release: 3.4 >Organization: >Environment: FreeBSD h.louko.com 3.4-RELEASE FreeBSD 3.4-RELEASE #5: Sun Mar 5 20:52:36 EET 2000 root@h.louko.com:/usr/src/sys/compile/ALOFON i386 >Description: There is a bug in net/if.c in function ifconf where variable space is compared with sizeof(ifr). sizeof appears to always be unsigned and int space, which can be negative, gets converted into unsigned and is a very large number and greater than sizeof(ifr). >How-To-Repeat: It may be a little bit tricky to adjust all parameters but it definitely is possible. >Fix: Change all sizeof(ifr) etc into (int)(sizeof(ifr)) >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200003192133.NAA69460>