CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/11/10 00:23:26
Modified files:
sys/kern : tty_pty.c
Log message:
Do not allow TIOCSCTTY, TIOCNOTTY, or TIOCSPGRP on the pty master. Return
ENOTTY for all 3 of these. They could create incoherent session states,
leading to dangerous UAF reported by openai (unfortunately their proposed
patch was batshit crazy and made the situation worse, due to not identifying
this as root cause, and writing code to support the condition). with claudio
various versions ok kettenis kirill and others
