FreeBSD Bugzilla – Attachment 224935 Details for
Bug 255871
net/rtsock: Fix a use after free in update_rtm_from_rc
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
assigning the new allocated *prtm to rtm
0001-net-uaf-update_rtm_from_rc.patch (text/plain), 468 bytes, created by
lylgood
on 2021-05-14 12:22:02 UTC
(
hide
)
Description:
assigning the new allocated *prtm to rtm
Filename:
MIME Type:
Creator:
lylgood
Created:
2021-05-14 12:22:02 UTC
Size:
468 bytes
patch
obsolete
>diff --git a/sys/net/rtsock.c b/sys/net/rtsock.c >index 6930bd167ac1..3cb645f42e4c 100644 >--- a/sys/net/rtsock.c >+++ b/sys/net/rtsock.c >@@ -976,6 +976,7 @@ update_rtm_from_rc(struct rt_addrinfo *info, struct rt_msghdr **prtm, > if ((error = update_rtm_from_info(info, prtm, alloc_len)) != 0) > return (error); > >+ rtm = *prtm; > rtm->rtm_flags = rc->rc_rt->rte_flags | nhop_get_rtflags(nh); > if (rtm->rtm_flags & RTF_GWFLAG_COMPAT) > rtm->rtm_flags = RTF_GATEWAY |
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=224935">View the attachment on a separate page</a>.</b>
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 255871
: 224935