NetBSD/sys/compat
maxv f2af77cb3a Yet another idiotic compat syscall that was developed with literally zero
test made. Simply invoking this syscall with _valid parameters_ triggers a
fatal fault, because the kernel tries to write to userland addresses.

With specially-crafted parameters it is easy to completely escalate
privileges into the kernel.

Also the size of the allocation is just obviously wrong, but it looks like
the callers are even more wrong, so not gonna fix it for now.

Reported-by: syzbot+b05096f3114b2820d81c@syzkaller.appspotmail.com
2020-06-27 07:00:43 +00:00
..
aoutm68k regen 2019-06-18 01:39:09 +00:00
common reduce stack usage in compat_60_ptmget_ioctl() - allocate struct ptmget 2020-06-24 17:47:52 +00:00
freebsd regen 2019-06-18 01:42:44 +00:00
linux Counter tweaks: 2020-06-11 22:21:05 +00:00
linux32 Counter tweaks: 2020-06-11 22:21:05 +00:00
m68k4k Move all non-emulation-specific coredump code into the coredump module, 2019-11-20 19:37:51 +00:00
net Remove clause 3 and 4 leftovers from TNF licenses in more sources. 2019-12-15 16:48:25 +00:00
netbsd32 Move proc_lock into the data segment. It was dynamically allocated because 2020-05-23 23:42:41 +00:00
netinet6 Add nd6.h compat header 2020-06-12 15:25:26 +00:00
ossaudio ossaudio: Avoid giving userland uninitialized memory. Noticed by maxv. 2020-04-19 21:37:00 +00:00
sunos Regen after -r1.82 of compat_sunos syscalls.master last September. 2020-06-11 03:47:05 +00:00
sunos32 remove special handling for symbolic links for COMPAT_43 lstat, it's 2020-06-24 10:28:16 +00:00
sys Yet another idiotic compat syscall that was developed with literally zero 2020-06-27 07:00:43 +00:00
ultrix Remove clause 3 and 4 leftovers from TNF licenses in more sources. 2019-12-15 16:48:25 +00:00
vax1k Move all non-emulation-specific coredump code into the coredump module, 2019-11-20 19:37:51 +00:00
Makefile Remove compat_osf1, discussed on tech-kern@. 2019-03-25 19:24:29 +00:00
Makefile.syscall Remove compat_osf1, discussed on tech-kern@. 2019-03-25 19:24:29 +00:00