CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/07/24 07:44:03
Modified files:
usr.sbin/vmd : control.c
Log message:
Reject invalid payload sizes at vmd(8) control boundary.
When we introduced agressive parsing and santization of imsg objects,
it introduced the ability for a control socket client to force vmd
to exit via fatal() calls. A simple solution is to validate just
the size of the object at the control process boundary as that's
the primary logic for triggering fatal() calls. This may need a
greater redesign but that would require inspecting all imsg
deseralization call points. For now, the author's proposal is fine.
Report and diff by Andrew Griffiths.
ok hshoexer@
