Brian Gianforcaro e954b4bdd4 Kernel: Return error from sys$execve() when called with zero arguments ...

There are many assumptions in the stack that argc is not zero, and
argv[0] points to a valid string. The recent pwnkit exploit on Linux
was able to exploit this assumption in the `pkexec` utility
(a SUID-root binary) to escalate from any user to root.

By convention `execve(..)` should always be called with at least one
valid argument, so lets enforce that semantic to harden the system
against vulnerabilities like pwnkit.

Reference: https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt

2022-01-26 13:05:59 +01:00

..

access.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

alarm.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

anon_create.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

beep.cpp

Kernel: Add CommandLine option to disable or enable the PC speaker

2022-01-23 00:40:54 +00:00

chdir.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

chmod.cpp

Kernel+LibC+LibCore+UE: Implement fchmodat(2)

2022-01-12 14:54:12 +01:00

chown.cpp

Kernel+LibC+LibCore: Add lchown and fchownat functions

2022-01-01 15:08:49 +01:00

clock.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

debug.cpp

Kernel+UE+LibC: Remove unused dbgputch syscall

2021-11-24 22:56:39 +01:00

disown.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

dup2.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

emuctl.cpp

Kernel: Replace KResult and KResultOr<T> with Error and ErrorOr<T>

2021-11-08 01:10:53 +01:00

execve.cpp

Kernel: Return error from sys$execve() when called with zero arguments

2022-01-26 13:05:59 +01:00

exit.cpp

Kernel: Fix a few typos

2021-10-01 00:51:49 +01:00

fcntl.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

fork.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

fsync.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

ftruncate.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

futex.cpp

Kernel: Fix futex syscall return values

2021-11-24 19:44:57 +01:00

get_dir_entries.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

get_stack_bounds.cpp

Kernel: Replace KResult and KResultOr<T> with Error and ErrorOr<T>

2021-11-08 01:10:53 +01:00

getrandom.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

getuid.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

hostname.cpp

Kernel: Convert hostname to KString

2022-01-13 00:20:08 -08:00

inode_watcher.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

ioctl.cpp

Kernel: Use copy_typed_from_user() in more places :^)

2021-12-18 11:30:10 +01:00

keymap.cpp

Kernel: Replace String with NonnullOwnPtr<KString> in sys$getkeymap

2022-01-25 08:06:02 +01:00

kill.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

link.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

lseek.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

mkdir.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

mknod.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

mmap.cpp

Kernel: Make AddressSpace::find_regions_intersecting OOM-fallible

2022-01-26 02:37:03 +02:00

mount.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

open.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

perf_event.cpp

Kernel: Replace KResult and KResultOr<T> with Error and ErrorOr<T>

2021-11-08 01:10:53 +01:00

pipe.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

pledge.cpp

Kernel: Delay Process data unprotection in sys$pledge()

2022-01-02 18:08:02 +01:00

poll.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

prctl.cpp

Kernel: Replace KResult and KResultOr<T> with Error and ErrorOr<T>

2021-11-08 01:10:53 +01:00

process.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

profiling.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

ptrace.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

purge.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

read.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

readlink.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

realpath.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

rename.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

rmdir.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

sched.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

sendfd.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

setpgid.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

setuid.cpp

Kernel: Fail gracefully due to OOM on HashTable set in sys$setgroups

2022-01-26 02:37:03 +02:00

sigaction.cpp

Kernel: Make AddressSpace::find_regions_intersecting OOM-fallible

2022-01-26 02:37:03 +02:00

socket.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

stat.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

statvfs.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

sync.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

sysconf.cpp

Kernel: Return the actual number of CPU cores that we have

2021-12-29 03:17:41 -08:00

thread.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

times.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

ttyname.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

umask.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

uname.cpp

Kernel: Fix OOB write in sys$uname

2022-01-13 00:20:08 -08:00

unlink.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

unveil.cpp

Kernel: Replace KResult and KResultOr<T> with Error and ErrorOr<T>

2021-11-08 01:10:53 +01:00

utime.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

waitid.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00

write.cpp

Kernel: Handle promise violations in the syscall handler

2021-12-29 18:08:15 +01:00