CVS: cvs.openbsd.org: src

CVSROOT:	/cvs
Module name:	src
Changes by:	[email protected]	2026/06/27 23:33:20

Modified files:
	sbin/iked      : proc.c 
	usr.sbin/httpd : proc.c 
	usr.sbin/relayd: proc.c 
	usr.sbin/snmpd : proc.c 

Log message:
restrict IMSG_CTL_PROCFD to parent and check process id/instance

IMSG_CTL_PROCFD messages contain a destination process id and instance
number that were used to index internal arrays before being checked.
A child sending bad imsgs could cause out-of-bounds reads or
writes.

Check for a missing fd, a bad process id, or an out-of-range instance
before any array is indexed.  Also reject IMSG_CTL_PROCFD that does not
come from the parent.

from Andrew Griffiths, diff by martijn@ and myself, ok martijn@