https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=206585

--- Comment #5 from CTurt <ct...@hardenedbsd.org> ---
I'd also like to add that the result of `copyin` isn't checked here, which can
lead to use of initialised heap buffer (it is not allocated with `M_ZERO`).

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
freebsd-bugs@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"

Reply via email to