⬢ DragonFlyBSD Kernel Audit
DF-0806 / run.stress.log
← back to finding ↓ download raw 
=== SUMMARY ===
Vulnerable code: 1-byte OOB WRITE at buf[N] (CWE-787) AND
                  1-byte OOB READ via uiomove(buf,N+1) (CWE-125)
Fixed code:       no OOB (kmalloc(N+1) + uiomove(buf,nlen))
Overall: BUG CONFIRMED + FIX VALIDATED
---RUN2---

=== SUMMARY ===
Vulnerable code: 1-byte OOB WRITE at buf[N] (CWE-787) AND
                  1-byte OOB READ via uiomove(buf,N+1) (CWE-125)
Fixed code:       no OOB (kmalloc(N+1) + uiomove(buf,nlen))
Overall: BUG CONFIRMED + FIX VALIDATED