fergalmoran/ladybird
1
0
Fork 0
mirror of https://github.com/fergalmoran/ladybird.git synced 2026-01-06 00:25:12 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
c0ed656c94ffa11e1949ed2e4cc68469aa0d0cd0
ladybird/Kernel
History
Brian Gianforcaro c0ed656c94 Kernel: Fix buffer overflow in VirtIOGPU create_3d_resource(..) 
This code attempts to copy the `Protocol::Resource3DSpecification`
struct into request, starting at `Protocol::ResourceCreate3D::target`
member of the `Protocol::ResourceCreate3D` struct.

The problem is that the `Protocol::Resource3DSpecification` struct
does not having the trailing `u32 padding` that the `ResourceCreate3D`
struct has. Leading to memcopy overrunning the struct and corrupting
32 bits of data trailing the struct.

Found by SonarCloud:
 - Memory copy function overflows the destination buffer.
2022-03-14 22:30:22 +01:00
..
API
Kernel: Mark sys$lseek() as not needing the big lock
2022-03-09 16:43:00 +01:00
Arch
Kernel: Move aarch64 Prekernel into Kernel
2022-03-12 14:54:12 -08:00
Bus
Kernel: Expose PCI BAR addresses in sysfs
2022-03-08 21:52:10 +01:00
Devices
Kernel: Wrap HIDManagement keymap data in SpinlockProtected
2022-03-07 16:35:23 +01:00
FileSystem
Kernel: Put Process unveil state in a SpinlockProtected container
2022-03-08 00:19:49 +01:00
Firmware
Kernel: Change static constexpr variables to constexpr where possible
2022-02-09 21:04:51 +00:00
Graphics
Kernel: Fix buffer overflow in VirtIOGPU create_3d_resource(..)
2022-03-14 22:30:22 +01:00
Heap
Kernel: Implement kmalloc_good_size for the new kmalloc
2022-03-08 00:46:25 +02:00
Interrupts
Kernel: Fix allocating identity-mapped APIC memory on x86_64
2022-02-21 20:44:09 +02:00
Library
Kernel: Remove dead code from ThreadSafeWeakPtr
2022-02-13 23:02:57 +01:00
Locking
Kernel: Make SpinlockProtected constructor forward all arguments
2022-03-08 00:19:49 +01:00
Memory
Kernel: Make Inode::set_shared_vmobject() OOM-fallible
2022-02-14 11:35:20 +01:00
Net
Kernel/Net: Don't try to enumerate PCI adapters if PCI is disabled
2022-03-02 18:41:54 +01:00
Prekernel
Kernel: Move aarch64 Prekernel into Kernel
2022-03-12 14:54:12 -08:00
Storage
Kernel/Storage: Don't try to enumerate PCI adapters if PCI is disabled
2022-03-02 18:41:54 +01:00
Syscalls
Revert "Kernel: Use an ArmedScopeGuard to revert changes after failed mmap"
2022-03-12 21:45:57 -08:00
Tasks
Kernel: Remove unnecessary includes from Thread.h
2022-01-30 16:21:59 +01:00
Time
Kernel: Use TRY() when validating clock_id in TimeManagement
2022-02-21 15:47:51 -08:00
TTY
Kernel: Change static constexpr variables to constexpr where possible
2022-02-09 21:04:51 +00:00
AddressSanitizer.cpp
…
AddressSanitizer.h
…
Assertions.h
…
AtomicEdgeAction.h
…
BootInfo.h
…
CMakeLists.txt
Kernel: Move aarch64 Prekernel into Kernel
2022-03-12 14:54:12 -08:00
CMOS.cpp
…
CMOS.h
…
CommandLine.cpp
Kernel: Change PCI access commandline option to also represent no access
2022-03-02 18:41:54 +01:00
CommandLine.h
Kernel: Change PCI access commandline option to also represent no access
2022-03-02 18:41:54 +01:00
Coredump.cpp
Everywhere: Make JSON serialization fallible
2022-02-27 20:37:57 +01:00
Coredump.h
…
Debug.h.in
AK+Kernel: Alphabetize debug macros
2022-02-09 17:59:19 +00:00
DoubleBuffer.cpp
…
DoubleBuffer.h
…
embedmap.sh
…
Forward.h
…
FutexQueue.cpp
…
FutexQueue.h
…
GlobalProcessExposed.cpp
Kernel: Wrap HIDManagement keymap data in SpinlockProtected
2022-03-07 16:35:23 +01:00
init.cpp
Kernel: Panic if the init process dies
2022-03-08 23:30:47 +01:00
KBuffer.h
Kernel: Propagate overflow errors from Memory::page_round_up
2021-12-28 23:08:50 +01:00
KBufferBuilder.cpp
Kernel+AK: Eliminate a couple of temporary String allocations
2021-12-30 14:16:03 +01:00
KBufferBuilder.h
Kernel: Make Thread::backtrace() fallible using KString
2022-01-12 16:09:09 +02:00
KLexicalPath.cpp
…
KLexicalPath.h
…
kprintf.cpp
Kernel: Instantiate a TextModeConsole early on if there's no framebuffer
2022-02-09 21:05:48 +00:00
kstdio.h
…
KString.cpp
…
KString.h
Kernel: Make {Nonnull,}OwnPtr<KString> hash compatible with StringView
2022-01-29 23:01:23 +02:00
KSyms.cpp
Kernel: Remove unnecessary includes from Thread.h
2022-01-30 16:21:59 +01:00
KSyms.h
…
MiniStdLib.cpp
…
mkmap.sh
Kernel: Use the toolchain's nm in mkmap.sh
2021-12-30 18:10:51 +01:00
Multiboot.h
Kernel: Only use multiboot framebuffer details if present
2022-01-06 22:34:11 +01:00
Panic.cpp
Kernel: Ensure that CommandLine is initialized before choosing PanicMode
2022-01-21 19:34:10 +02:00
Panic.h
…
PerformanceEventBuffer.cpp
Kernel: Fixed behavior of repeated calls to register_string
2022-03-03 14:53:35 -08:00
PerformanceEventBuffer.h
Kernel: Fixed behavior of repeated calls to register_string
2022-03-03 14:53:35 -08:00
PerformanceManager.h
Kernel/Profiling: Add profiling to read syscall
2022-02-14 11:38:13 +01:00
PhysicalAddress.h
…
Process.cpp
Kernel: Panic if the init process dies
2022-03-08 23:30:47 +01:00
Process.h
Kernel: Put Process unveil state in a SpinlockProtected container
2022-03-08 00:19:49 +01:00
ProcessExposed.cpp
Kernel: Add some implied auto qualifiers
2021-12-30 14:32:17 +01:00
ProcessExposed.h
Kernel/PCI: Don't create /proc/pci if PCI is disabled
2022-03-02 18:41:54 +01:00
ProcessGroup.cpp
…
ProcessGroup.h
…
ProcessProcFSTraits.cpp
…
ProcessSpecificExposed.cpp
Kernel: Put Process unveil state in a SpinlockProtected container
2022-03-08 00:19:49 +01:00
Random.cpp
Kernel: Make KernelRng not inherit from Lockable
2021-12-26 21:22:59 +01:00
Random.h
Everywhere: Convert ByteBuffer factory methods from Optional -> ErrorOr
2022-01-24 22:36:09 +01:00
RTC.cpp
Everywhere: Fix many spelling errors
2022-01-07 10:56:59 +01:00
RTC.h
…
SanCov.cpp
Kernel: Add some implied auto qualifiers
2021-12-30 14:32:17 +01:00
Scheduler.cpp
Kernel: Try to dispatch pending signals on context switch
2022-02-21 19:42:16 +01:00
Scheduler.h
Kernel: Remove unused bool return values from scheduler functions
2022-01-30 16:21:59 +01:00
Sections.h
Kernel: Move userspace virtual address range base to 0x10000
2021-12-22 00:02:36 -08:00
StdLib.cpp
Kernel: Remove unnecessary includes from Thread.h
2022-01-30 16:21:59 +01:00
StdLib.h
…
Syscall.cpp
Kernel: Change static constexpr variables to constexpr where possible
2022-02-09 21:04:51 +00:00
Thread.cpp
Kernel: Save and restore FPU state on signal dispatch on i386/x86_64
2022-03-04 20:07:05 +01:00
Thread.h
Kernel: Fill some siginfo and ucontext fields on SA_SIGINFO
2022-03-04 20:07:05 +01:00
ThreadBlockers.cpp
Kernel: Move Thread::block<BlockerType>() out of the Thread.h header
2022-01-30 16:21:59 +01:00
ThreadTracer.cpp
…
ThreadTracer.h
Kernel: Add missing includes in ThreadTracer and WorkQueue
2021-12-30 14:32:17 +01:00
TimerQueue.cpp
…
TimerQueue.h
…
UBSanitizer.cpp
AK+Kernel+LibSanitizer: Store "ubsan-is-deadly" flag as Atomic<bool>
2022-02-03 16:11:26 +01:00
UnixTypes.h
Kernel: Add support for SA_SIGINFO
2022-03-04 20:07:05 +01:00
UserOrKernelBuffer.cpp
…
UserOrKernelBuffer.h
Kernel+LibC: Move errno definitions to Kernel/API/POSIX
2021-12-16 22:21:35 +03:30
VirtualAddress.h
…
WaitQueue.cpp
…
WaitQueue.h
…
WorkQueue.cpp
…
WorkQueue.h
Kernel: Add missing includes in ThreadTracer and WorkQueue
2021-12-30 14:32:17 +01:00