diff options
| author | Mark Johnston <markj@FreeBSD.org> | 2018-11-26 13:42:18 +0000 |
|---|---|---|
| committer | Mark Johnston <markj@FreeBSD.org> | 2018-11-26 13:42:18 +0000 |
| commit | d25f8522beb8a7f198dc175b7a39dde18127d419 (patch) | |
| tree | d7465447c68f3914de92a69e721ebbb57e912de8 /sys/net/route.h | |
| parent | 7d69e4cde77bd1e4caad686f04a543ac96fd25e3 (diff) | |
| download | src-d25f8522beb8a7f198dc175b7a39dde18127d419.tar.gz src-d25f8522beb8a7f198dc175b7a39dde18127d419.zip | |
Plug routing sysctl leaks.
Various structures exported by sysctl_rtsock() contain padding fields
which were not being zeroed.
Reported by: Thomas Barabosch, Fraunhofer FKIE
Reviewed by: ae
MFC after: 3 days
Security: kernel memory disclosure
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D18333
Notes
Notes:
svn path=/head/; revision=340968
Diffstat (limited to 'sys/net/route.h')
| -rw-r--r-- | sys/net/route.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sys/net/route.h b/sys/net/route.h index 15ec1b3e9a38..c4333838e9af 100644 --- a/sys/net/route.h +++ b/sys/net/route.h @@ -251,6 +251,7 @@ struct rt_msghdr { u_char rtm_version; /* future binary compatibility */ u_char rtm_type; /* message type */ u_short rtm_index; /* index for associated ifp */ + u_short _rtm_spare1; int rtm_flags; /* flags, incl. kern & message, e.g. DONE */ int rtm_addrs; /* bitmask identifying sockaddrs in msg */ pid_t rtm_pid; /* identify sender */ |