1
0
mirror of https://git.FreeBSD.org/src.git synced 2024-10-18 02:19:39 +00:00
freebsd/usr.sbin
Pierre Pronchery c4ec2918f2 bhyve: avoid buffer overflow in pci_vtcon_control_send
The program copies an input buffer to an output buffer without verifying
that the size of the input buffer is less than the size of the output
buffer, leading to a buffer overflow.

Inside the function pci_vtcon_control_send, the length of the iov buffer
is not validated before copy of the payload.

Reported by:    Synacktiv
Reviewed by:	markj
Security:       HYP-19
Sponsored by:   The Alpha-Omega Project
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D46105

(cherry picked from commit 8934002959)

This is a follow-up to the fix for HYP-19, addressing another condition
where an overflow might still occur. (Spotted by jhb@, thanks!)

Reported by:    Synacktiv
Reviewed by:	markj
Security:       HYP-19
Sponsored by:   Alpha-Omega Project
Sponsored by:   The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D46882

(cherry picked from commit b34a4edefb)
(cherry picked from commit c17d96fe79)
2024-10-17 08:34:11 -04:00
..
ac Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
accton Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
acpi Revert "acpidump: dump AMD IVRS table describing IOMMU layout" 2024-04-17 12:40:04 +03:00
adduser adduser: Better document ZFS dataset creation. 2024-08-21 12:29:26 +02:00
ancontrol Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
apm Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
apmd Purge more stray embedded $FreeBSD$ strings 2023-10-24 11:13:18 -07:00
arp Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
audit
auditd
auditdistd
auditreduce
authpf
autofs automount(8): when flushing autofs, specify fsid 2023-10-24 03:47:20 +03:00
bhyve bhyve: avoid buffer overflow in pci_vtcon_control_send 2024-10-17 08:34:11 -04:00
bhyvectl Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
bhyveload bhyveload(8): document some SECURITY CONSIDERATIONS 2024-01-22 11:17:53 -06:00
binmiscctl binmiscctl.8: Change the example to armv7 2024-07-15 13:35:21 +01:00
blacklistctl
blacklistd
bluetooth Remove $FreeBSD$: one-line bare tag 2023-08-23 11:43:33 -06:00
boot0cfg Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
bootparamd Remove $FreeBSD$: one-line bare tag 2023-08-23 11:43:33 -06:00
bsdconfig Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
bsdinstall bsdinstall: update comment related to pkg 2024-06-12 16:56:20 +00:00
bsnmpd MFC: unbreak BEGEMOT-LM75-MIB.txt 2023-09-14 18:58:23 +07:00
btxld Purge more stray embedded $FreeBSD$ strings 2023-10-24 11:13:18 -07:00
camdd Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
cdcontrol Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
certctl Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
chkgrp Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
chown Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
chroot Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
ckdist Purge more stray embedded $FreeBSD$ strings 2023-10-24 11:13:18 -07:00
clear_locks Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
config Purge more stray embedded $FreeBSD$ strings 2023-10-24 11:13:18 -07:00
cpucontrol Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
crashinfo crashinfo: Get local variable values in the gdb backtrace 2023-11-13 10:20:50 -05:00
cron Remove $FreeBSD$: one-line bare tag 2023-08-23 11:43:33 -06:00
crunch crunchgen: slap a dependency on the generated makefile for .lo 2024-03-17 22:34:09 -05:00
ctladm ctladm: don't require the use of "-p" with "port -r", part 2 2024-07-20 08:56:36 -06:00
ctld ctld: plug memory leaks 2024-06-28 13:35:38 -06:00
cxgbetool cxgbetool(8): Be flexible about the nexus name. 2024-07-17 00:18:12 -07:00
daemon daemon: fix -R to enable supervision mode 2024-04-17 00:50:03 -05:00
dconschat Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
devctl Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
devinfo Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
diskinfo diskinfo(8): introduce new option -l 2024-03-19 13:56:45 +07:00
dumpcis Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
editmap
edquota Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
efibootmgr efibootmgr: allow -u as a valid option 2024-03-31 16:57:17 +00:00
efidp Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
efivar Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
etcupdate Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
extattr Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
extattrctl Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
fdcontrol Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
fdformat Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
fdread Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
fdwrite Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
fifolog Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
flowctl Purge more stray embedded $FreeBSD$ strings 2023-10-24 11:13:18 -07:00
fmtree Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
freebsd-update freebsd-update: Don't provide copiable commands in output 2024-04-17 08:51:38 +02:00
fstyp Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
ftp-proxy
fwcontrol Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
getfmac Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
getpmac Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
gpioctl Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
gssd Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
gstat usr.sbin/gstat: add microsecond precision for disk latency 2024-08-11 22:31:13 +03:00
hyperv
i2c Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
ifmcstat Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
inetd Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
iostat iostat.8: Better wording for some use cases 2023-12-17 15:52:21 +01:00
iovctl iovctl: allow vlan restrictions to be passed to the driver 2024-07-01 18:06:02 +02:00
ip6addrctl Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
ipfwpcap Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
iscsid Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
jail MFC jail: unbreak the zfs.mount_snapshot option 2024-09-24 10:18:41 -07:00
jexec jexec.8: Add examples section 2023-10-10 20:18:58 -03:00
jls Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
kbdcontrol Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
kbdmap Remove $FreeBSD$: one-line bare tag 2023-08-23 11:43:33 -06:00
keyserv Fix enum warning in keyserv 2024-08-04 12:22:45 +02:00
kgmon Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
kldxref kldxref: Fix bootstrapping on macOS with Clang 16 / Apple Clang 15 2024-05-02 21:11:52 +01:00
lastlogin Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
lpr sys/*/conf/*, docs: fix links to handbook 2024-01-09 22:07:46 -05:00
lptcontrol Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
mailstats
mailwrapper Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
makefs makefs: warn that ffs sectorsize other than 512 may not work 2024-03-22 15:03:48 -04:00
makemap
manctl Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
memcontrol Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
mergemaster mergemaster: postpone removal to FreeBSD 15 2024-06-18 10:20:41 -04:00
mfiutil Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
mixer Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
mld6query Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
mlx5tool Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
mlxcontrol Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
mount_smbfs
mountd mountd: Add check for "=" after exports(5) options 2024-09-27 15:18:46 -07:00
moused Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
mpsutil mpsutil: Clean up libutil deps 2024-01-31 09:17:25 -05:00
mptable Purge more stray embedded $FreeBSD$ strings 2023-10-24 11:13:18 -07:00
mptutil Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
mtest Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
ndiscvt Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
ndp ndp: Fix libxo formatting for the header of neighbor cache 2024-09-11 18:07:48 +08:00
newsyslog When parsing a rule to rotate log files on a specific week day, 2023-09-23 21:04:40 +00:00
nfscbd Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
nfsd nfsd.c: Synchronize error handling 2024-10-13 13:58:47 -07:00
nfsdumpstate Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
nfsrevoke Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
nfsuserd Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
ngctl Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
nghook Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
nmtree Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
nologin Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
nscd Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
ntp ntp: Improve descriptions in man pages 2024-09-30 21:29:48 -07:00
nvram Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
ofwdump Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
pciconf pciconf(8): dump AMD IOMMU Base Capability 2024-04-17 11:13:18 +03:00
periodic periodic.conf: remove long deprecated security_daily_compat_var() 2024-06-05 10:08:28 +02:00
pkg pkg: improve error message 2024-10-11 12:17:56 -04:00
pmc
pmcannotate Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
pmccontrol Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
pmcstat Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
pmcstudy Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
pnfsdscopymr Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
pnfsdsfile Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
pnfsdskill Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
pnpinfo
portsnap Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
powerd powerd.8: Provide a whole path to power_profile for clarity 2023-10-04 13:10:42 +02:00
ppp sys/*/conf/*, docs: fix links to handbook 2024-01-09 22:07:46 -05:00
pppctl Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
praliases
praudit
prometheus_sysctl_exporter Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
pstat swapinfo.8: Mention BLOCKSIZE in the ENVIRONMENT section 2023-10-04 13:14:57 +02:00
pw pw userdel: destroy home dataset if empty 2024-08-21 12:31:22 +02:00
pwd_mkdb Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
pwm Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
quot Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
quotaon Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
rarpd Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
repquota Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
rip6query Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
rmt Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
route6d Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
rpc.lockd Add man page for nfslockd. 2024-05-14 08:59:12 +02:00
rpc.statd Purge more stray embedded $FreeBSD$ strings 2023-10-24 11:13:18 -07:00
rpc.tlsclntd Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
rpc.tlsservd Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
rpc.umntall Purge more stray embedded $FreeBSD$ strings 2023-10-24 11:13:18 -07:00
rpc.yppasswdd Remove $FreeBSD$: one-line xdr pattern 2023-08-23 11:43:34 -06:00
rpc.ypupdated Purge more stray embedded $FreeBSD$ strings 2023-10-24 11:13:18 -07:00
rpc.ypxfrd Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
rpcbind Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
rrenumd Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
rtadvctl Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
rtadvd Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
rtprio Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
rtsold Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
rwhod Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
sa Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
sendmail Merge commit '850ef5ae11d69ea3381bd310f564f025fc8caea3' 2024-02-07 02:47:40 +00:00
service Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
services_mkdb Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
sesutil sesutil: Fix a typo in an error message 2024-10-13 13:12:23 +00:00
setfib Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
setfmac Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
setpmac Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
smbmsg Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
snapinfo Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
spi Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
spkrtest Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
spray Purge more stray embedded $FreeBSD$ strings 2023-10-24 11:13:18 -07:00
syslogd syslogd: Add some basic regression tests 2023-08-31 09:55:19 -04:00
sysrc Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
tcpdchk
tcpdmatch
tcpdrop Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
tcpdump
tests
traceroute
traceroute6 Purge more stray embedded $FreeBSD$ strings 2023-10-24 11:13:18 -07:00
trim Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
trpt Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
tzsetup Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
uathload Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
uefisign Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
ugidfw Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
uhsoctl Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
unbound unbound: Vendor import 1.21.1 2024-10-10 12:53:24 -07:00
usbconfig Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
usbdump Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
utx Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
valectl Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
vidcontrol Purge more stray embedded $FreeBSD$ strings 2023-10-24 11:13:18 -07:00
vigr Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
vipw Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
wake Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
watch Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
watchdogd Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
wlandebug Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
wpa wpa: Fix gcc build 2024-09-30 21:29:48 -07:00
yp_mkdb Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
ypbind Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
ypldap Trim various $FreeBSD$ 2023-10-24 11:23:57 -07:00
yppoll Remove $FreeBSD$: one-line nroff pattern 2023-08-23 11:43:32 -06:00
yppush Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
ypserv Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
ypset Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
zdump
zic
zonectl Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
zzz Remove $FreeBSD$: two-line nroff pattern 2023-08-23 11:43:31 -06:00
Makefile
Makefile.amd64
Makefile.arm
Makefile.arm64
Makefile.i386
Makefile.inc
Makefile.mips
Makefile.powerpc
Makefile.riscv