CVS: cvs.openbsd.org: src

Dave Voutila <[email protected]> Thu, 6 Aug 2026 08:20:39 -0600 (MDT)

Newsgroups	gmane.os.openbsd.cvs
Message-ID	<[email protected]>

CVSROOT:	/cvs
Module name:	src
Changes by:	[email protected]	2026/08/06 08:20:39

Modified files:
	usr.sbin/vmd   : vmd.c 

Log message:
vmd(8): reject empty IMSG_VMDOP_LOAD messages from clients.

Reject empty values (either zero bytes or a single NUL) to prevent
zero-sized allocations, out-of-bounds write of a NUL byte, and
incorrectly triggering a reload event.

Report and original diff by Andrew Griffiths.

ok hshoexer@, mlarkin@