[Bug 248444] /usr/sbin/jail crashes when parsing certain configuration files

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view

[Bug 248444] /usr/sbin/jail crashes when parsing certain configuration files


Akos Somfai <[hidden email]> changed:

           What    |Removed                     |Added
                 CC|                            |[hidden email]

--- Comment #1 from Akos Somfai <[hidden email]> ---
Created attachment 217233
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=217233&action=edit
proposed patch for jail

The issue is seen every time when the defined variable ("$interface" in the bug
report) is the same as one of the built-in jail.conf parameters excluding the
leading "$". The crash is a use-after-free as variable data is free-ed at a
point but referenced later from intparams.

Having a variable with the same name as a built-in one is problematic anyways
-- the fix eliminates the crash and treats such entries as pure variables as
expected by the leading "$". This is also according to the jail.conf
description that says that "variables are  only used for substitution, while
parameters are used both   for substitution and for passing to the kernel."

You are receiving this mail because:
You are the assignee for the bug.
[hidden email] mailing list
To unsubscribe, send any mail to "[hidden email]"