[Bug 173002] [net] data type size problem in if_spppsubr.c

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=173002

Zhenlei Huang <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]

--- Comment #5 from Zhenlei Huang <[email protected]> ---
Actually user space `struct spppreq spr` is not explicitly zeroed [1], so
`fuword() / fueword()` can read garbage into kernel space. I guess
/sbin/spppcontrol will get error EINVAL occasionally on a 64bit platforms.

As this is an old report, not sure if the reporter Jens can confirm this.

1.
https://cgit.freebsd.org/src/tree/sbin/spppcontrol/spppcontrol.c?h=stable/13#n63

-- 
You are receiving this mail because:
You are the assignee for the bug.