Bug 218687 - [patch] use uninitialized fields of struct inpcb
Summary: [patch] use uninitialized fields of struct inpcb
Status: New
Alias: None
Product: Base System
Classification: Unclassified
Component: kern (show other bugs)
Version: CURRENT
Hardware: Any Any
: --- Affects Only Me
Assignee: freebsd-net (Nobody)
URL:
Keywords: patch
Depends on:
Blocks:
 
Reported: 2017-04-16 14:54 UTC by luke.tw
Modified: 2017-07-27 01:16 UTC (History)
1 user (show)

See Also:

Attachments
patch for struct inpcb (973 bytes, patch)
2017-04-16 14:54 UTC, luke.tw 		no flags Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description luke.tw 2017-04-16 14:54:38 UTC 
Created attachment 181823 [details]
patch for struct inpcb

There are two uninitialized use of struct inpcb.

1. inp_lock
   it is possible to use garbage value in the lock field when INP_LOCK_INIT().

2. inp_rtu
   Use of the uninitialized value in the field can trigger lots of assert and page fault.