diff options
| author |   anton <anton@openbsd.org> | 2019-10-28 19:57:50 +0000 |
|---|---|---|
| committer | anton <anton@openbsd.org> | 2019-10-28 19:57:50 +0000 |
| commit | d13730a2799315653da786c7fbdabe600367c0ad (patch) | |
| tree | d14c70e234a854cb7ae99841245ada4034ab8668 /lib | |
| parent | Have iwm(4) configure the PCIe LTR. (diff) | |
| download | wireguard-openbsd-d13730a2799315653da786c7fbdabe600367c0ad.tar.xz wireguard-openbsd-d13730a2799315653da786c7fbdabe600367c0ad.zip | |
Copy in the user-supplied buffer in shmctl(2) before looking up the
shared memory segment. Otherwise, if copyin ends up sleeping it allows
another thread to remove the same segment leading to a use-after-free.
Feedback from kettenis@ and ok guenther@
Reported-by: syzbot+0de42c2e600a6dd3091d@syzkaller.appspotmail.com
Diffstat (limited to 'lib')
0 files changed, 0 insertions, 0 deletions