Module Name:    src
Committed By:   maxv
Date:           Thu Nov 29 11:45:52 UTC 2018

Modified Files:
        src/sys/kern: sys_ptrace_common.c

Log Message:
Fix stack info leak.

        + Possible info leak: [len=136, leaked=92]
        | #0 0xffffffff80baf397 in kleak_copyout
        | #1 0xffffffff80bd4155 in ptrace_copyout_siginfo
        | #2 0xffffffff80bd5348 in do_ptrace
        | #3 0xffffffff80bd40fe in sys_ptrace
        | #4 0xffffffff80259c42 in syscall


To generate a diff of this commit:
cvs rdiff -u -r1.45 -r1.46 src/sys/kern/sys_ptrace_common.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: src/sys/kern/sys_ptrace_common.c
diff -u src/sys/kern/sys_ptrace_common.c:1.45 src/sys/kern/sys_ptrace_common.c:1.46
--- src/sys/kern/sys_ptrace_common.c:1.45	Sat Jun 23 03:32:48 2018
+++ src/sys/kern/sys_ptrace_common.c	Thu Nov 29 11:45:52 2018
@@ -1,4 +1,4 @@
-/*	$NetBSD: sys_ptrace_common.c,v 1.45 2018/06/23 03:32:48 christos Exp $	*/
+/*	$NetBSD: sys_ptrace_common.c,v 1.46 2018/11/29 11:45:52 maxv Exp $	*/
 
 /*-
  * Copyright (c) 2008, 2009 The NetBSD Foundation, Inc.
@@ -118,7 +118,7 @@
  */
 
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: sys_ptrace_common.c,v 1.45 2018/06/23 03:32:48 christos Exp $");
+__KERNEL_RCSID(0, "$NetBSD: sys_ptrace_common.c,v 1.46 2018/11/29 11:45:52 maxv Exp $");
 
 #ifdef _KERNEL_OPT
 #include "opt_ptrace.h"
@@ -570,6 +570,7 @@ ptrace_get_siginfo(struct proc *t, struc
 {
 	struct ptrace_siginfo psi;
 
+	memset(&psi, 0, sizeof(psi));
 	psi.psi_siginfo._info = t->p_sigctx.ps_info;
 	psi.psi_lwpid = t->p_sigctx.ps_lwp;
 	DPRINTF(("%s: lwp=%d signal=%d\n", __func__, psi.psi_lwpid,

Reply via email to