[Midnightbsd-cvs] [MidnightBSD/src] e65a25: Handlers for *_CFG_PAGE read / write ioctls in the...

[Lucas Holt]

  Branch: refs/heads/stable/2.1
  Home:   https://github.com/MidnightBSD/src
  Commit: e65a25ae2b329df2a5a5c597cb669e366331432d
      https://github.com/MidnightBSD/src/commit/e65a25ae2b329df2a5a5c597cb669e366331432d
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2022-04-06 (Wed, 06 Apr 2022)

  Changed paths:
    M sys/dev/mpr/mpr_user.c
    M sys/dev/mps/mps_user.c
    M sys/dev/mpt/mpt_user.c

  Log Message:
  -----------
  Handlers for *_CFG_PAGE read / write ioctls in the mpr, mps, and mpt drivers
allocated a buffer of a caller-specified size, but copied to it a fixed size
header.  Other heap content would be overwritten if the specified size was
too small.

Obtained from: FreeBSD


  Commit: 0dcc2b7d45abc86d0a0b459fb16b94657a291771
      https://github.com/MidnightBSD/src/commit/0dcc2b7d45abc86d0a0b459fb16b94657a291771
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2022-04-06 (Wed, 06 Apr 2022)

  Changed paths:
    M sys/net80211/ieee80211_input.c

  Log Message:
  -----------
  The 802.11 beacon handling routine failed to validate the length of an
IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer.

Obtained from: FreeBSD


Compare: https://github.com/MidnightBSD/src/compare/6ff50bfcda10...0dcc2b7d45ab