On Mon, Dec 17, 2018 at 09:46:59AM -0700, Alexander Bluhm wrote: > CVSROOT: /cvs > Module name: src > Changes by: [email protected] 2018/12/17 09:46:59 > > Modified files: > sys/kern : uipc_socket.c > > Log message: > When using MSG_WAITALL, soreceive() can sleep while processing the > receive buffer of a stream socket. Then a new pair of control and > data mbuf can be appended to the mbuf queue. In this case, terminate > the loop with a short read to prevent a panic. Userland should > read the control message with the next system call. > OK claudio@ deraadt@
Sorry, I forgot to mention, this was found by Greg Steuck. Reported-by: [email protected]
