diff options
| author | Bojan Novković <bnovkov@FreeBSD.org> | 2026-07-07 12:28:50 +0000 |
|---|---|---|
| committer | Bojan Novković <bnovkov@FreeBSD.org> | 2026-09-18 10:27:47 +0000 |
| commit | 7f5f07b139a5fd456087804ee96802b54c151703 (patch) | |
| tree | 4c48b9d10b7b6e17e2f8d1206f1a50177c4b2dd2 /usr.bin | |
| parent | d749076e80a2f2627fea5dfd3d328cc4fb767ec9 (diff) | |
db/hash: Harden hash(3) database code
The hash(3) database code does not validate the on-disk database header,
leaving it open to several OOB read and write vulnerabilities.
This change adds basic header validation and array bounds checking to
parts of the hash(3) code that can be manipulated by messing with the
database header.
Reviewed by: kevans
Sponsored by: Klara, Inc.
MFC after: 1 month
Differential Revision: https://reviews.freebsd.org/D58822
Diffstat (limited to 'usr.bin')
0 files changed, 0 insertions, 0 deletions