Author: jamie
Date: Mon Aug 20 05:32:42 2018
New Revision: 338091
URL: https://svnweb.freebsd.org/changeset/base/338091

Log:
  MFC r337867:
  
    Don't let clobber jailparam values when checking for modification of
    init-only parameters.
  
  PR:           230487
  Submitted by: Jason Mader

Modified:
  stable/10/usr.sbin/jail/jail.c
Directory Properties:
  stable/10/   (props changed)

Modified: stable/10/usr.sbin/jail/jail.c
==============================================================================
--- stable/10/usr.sbin/jail/jail.c      Mon Aug 20 05:32:40 2018        
(r338090)
+++ stable/10/usr.sbin/jail/jail.c      Mon Aug 20 05:32:42 2018        
(r338091)
@@ -800,8 +800,10 @@ rdtun_params(struct cfjail *j, int dofail)
                exit(1);
        }
        for (jp = j->jp; jp < j->jp + j->njp; jp++)
-               if (JP_RDTUN(jp) && strcmp(jp->jp_name, "jid"))
+               if (JP_RDTUN(jp) && strcmp(jp->jp_name, "jid")) {
                        *++rtjp = *jp;
+                       rtjp->jp_value = NULL;
+               }
        rval = 0;
        if (jailparam_get(rtparams, nrt,
            bool_param(j->intparams[IP_ALLOW_DYING]) ? JAIL_DYING : 0) > 0) {
@@ -812,8 +814,11 @@ rdtun_params(struct cfjail *j, int dofail)
                                    jp->jp_valuelen == 0 &&
                                    *(int *)jp->jp_value) &&
                                    !(rtjp->jp_valuelen == jp->jp_valuelen &&
-                                   !memcmp(rtjp->jp_value, jp->jp_value,
-                                   jp->jp_valuelen))) {
+                                   !((jp->jp_ctltype & CTLTYPE) ==
+                                   CTLTYPE_STRING ? strncmp(rtjp->jp_value,
+                                   jp->jp_value, jp->jp_valuelen) :
+                                   memcmp(rtjp->jp_value, jp->jp_value,
+                                   jp->jp_valuelen)))) {
                                        if (dofail) {
                                                jail_warnx(j, "%s cannot be "
                                                    "changed after creation",
_______________________________________________
svn-src-all@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-all
To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"

Reply via email to