PDA

Bekijk Volledige Versie : FreeBSD all versions FireWire IOCTL kernel integer overflow information disclousure



Rodrigo Rubira Branco
16/11/06, 09:00
----=_bff052b24ca663d984265d32e2865de3a
Content-Type: text/plain
Content-Transfer-Encoding: 8bit

--
http://www.kernelhacking.com/rodrigo

Kernel Hacking: If i really know, i can hack

GPG KeyID: 5E90CA19



________________________________________________
Message sent using UebiMiau 2.7.2


----=_bff052b24ca663d984265d32e2865de3a
Content-Type: text/plain; name="freebsd.txt"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="freebsd.txt"

RnJlZUJTRCBhbGwgdmVyc2lvbnMgRmlyZVdpcmUgSU9DVEwga2 VybmVsIGludGVnZXIgb3ZlcmZs
b3cgaW5mb3JtYXRpb24gZGlzY2xvdXN1cmUKMTEvMTUvMjAwNg oKTm90aWNlCj09PT09PT09PT09
PT09PT09PT0KICAgIFRoaXMgYnVnIGhhcyBiZWVuIHNwZWNpYW xseSBkaXNjb3ZlcmVkIGZvciB0
aGUgTW9udGggb2YgS2VybmVsIEJ1Z3MgYW5kIHRvCiAgICB0aG UgSGFja2VycyB0byBIYWNrZXJz
IENvbmZlcmVuY2UgSUlJIChodHRwOi8vd3d3LmgyaGMub3JnLm JyL2VuLykuCgoKU3VtbWFyeQo9
PT09PT09PT09PT09PT09PT09CgogICAgRmlyZXdpcmUgZGV2aW NlIGlzIGVuYWJsZWQgYnkgZGVm
YXVsdCBpbiB0aGUgR0VORVJJQyBrZXJuZWwuICBJdCBkZWZpbm VzCiAgICBhbiBJT0NUTCBmdW5j
dGlvbiB3aGljaCBjYW4gYmUgbWFsaWNpb3VzIGNhbGxlZCBwYX NzaW5nIGEgbmVnYXRpdmUgYnVm
ZmVyCiAgICBsZW5naHQgdmFsdWUuICBUaGlzIHZhbHVlIHdpbG wgYnlwYXNzIHRoZSBsZW5naHQg
Y2hlY2sgKGJlY2F1c2UgdGhlIHZhbHVlCiAgICBpcyBuZWdhdG l2ZSkgYW5kIHdpbGwgYmUgdXNl
ZCBpbiBhIGNvcHlvdXQgb3BlcmF0aW9uLgoKU3lzdGVtcyBBZm ZlY3RlZAo9PT09PT09PT09PT09
PT09PT09CgogICAgRnJlZUJTRCAgICAgYWxsIHZlcnNpb25zCi AgICBOZXRCU0QgICAgICBhbGwg
dmVyc2lvbnMKICAgIERyYWdvbkZseSAgIGFsbCB2ZXJzaW9ucw ogICAgVHJ1c3RlZEJTRCogYWxs
IHZlcnNpb25zCgpJbXBhY3QKPT09PT09PT09PT09PT09PT09PQ oKICAgIFRoaXMgaXMgYSBrZXJu
ZWwgYnVnIGFuZCB0aGUgc3lzdGVtIGNhbiBiZSBjb21wcm9taX NlZCBieSBsb2NhbCB1c2VycyBh
bmQgCiAgICBpbXBvcnRhbnQgc3lzdGVtIGluZm9ybWF0aW9ucy BjYW4gYmUgZGlzY2xvdXNlZCAo
YmFzaWNhbGx5LCBhIG1lbSBkdW1wIDspICkKCkV4cGxhbmF0aW 9uCj09PT09PT09PT09PT09PT09
PT0KCiAgICBGaXJld2lyZSBpbnRlcmZhY2UgY2FuIGJlIHR1bm 5lZC4gIEl0IHByb3ZpZGVzIGFu
IGlvY3RsIGZ1bmN0aW9uIHJlY2VpdmluZwogICAgbWFueSBwYX JhbWV0ZXJzIHRoYXQgY2FuIGJl
IGNoYW5nZWQuCgogICAgVGhlIGZvbGxvdyBpcyBhIGNvZGUgZn JhZ21lbnQgZnJvbSAoRnJlZUJT
RCAtIGRldi9maXJld2lyZS9md2Rldi5jIChmd19pb2N0bCAgIC BmdW5jdGlvbikgfHwgRHJhZ29u
Rmx5QlNEIGJ1cy9maXJld2lyZS9md2Rldi5jIChmd19pb2N0bC BmdW5jdGlvbikgfHwgTmV0QlNE
ICAgIC0gZGV2L2llZWUxMzk0L2Z3ZGV2LmMgKEZXX0lPQ1RMIG Z1bmN0aW9uKSkgZmlsZToKCglp
ZiAoY3JvbV9idWYtPmxlbiA8IGxlbikKCQlsZW4gPSBjcm9tX2 J1Zi0+bGVuOwoJZWxzZQoJCWNy
b21fYnVmLT5sZW4gPSBsZW47CgoJZXJyID0gY29weW91dChwdH IsIGNyb21fYnVmLT5wdHIsIGxl
bik7CgogICAgV2UgY29udHJvbCB0aGUgY3JvbV9idWYtPmxlbi AoaXQncyBwYXNzZWQgYXMgYXJn
dW1lbnQgdG8gdGhlIGlvY3RsIGZ1bmN0aW9uKQogICAgc28sIH Bhc3NpbmcgaXQgYXMgYSBuZWdh
dGl2ZSB2YWx1ZSB3aWxsIGJ5cGFzcyB0aGlzIGlmIHN0YXRlbW VudCAob3VyIHZhbHVlCiAgICBp
cyBtaW5vciB0aGFuIHRoZSBkZWZhdWx0IG9uZSkuCgogICAgU2 8sIG91ciB2YWx1ZSBpcyB1c2Vk
IGluIGEgY29weW91dCBmdW5jdGlvbi4gcHRyIGlzIGRlZmluZW QgYmVmb3JlIHRoaXMKICAgIGNv
cHlvdXQgYXM6CgkgaWYgKCBmd2RldiA9PSBOVUxMICkgewoJCS 4uLgoJCXB0ciA9IG1hbGxvYyhD
Uk9NU0laRSwgTV9GVywgTV9XQUlUT0spOwoJCS4uLgoJIH0gZW xzZSB7CgkJcHRyID0gKHZvaWQg
KikmZndkZXYtPmNzcnJvbVswXTsKCQkuLi4KCX0KCiAgICBUaG lzIGluZm9ybWF0aW9uIGRpc2Ns
b3VzdXJlIGxlYWQgYW4gYXR0YWNrZXIgZHVtcCBhbGwgdGhlIH N5c3RlbSBtZW1vcnkuCgpTb2x1
dGlvbgo9PT09PT09PT09PT09PT09PT09CgogICAgIEF0dGFjaG VkIGluIHRoaXMgYWR2aXNvcnkg
YSBwYXRjaCBmb3IgdGhlIEZyZWVCU0QgNS41IChpdCdzIHByZX R0eSBzaW1wbGUsICAgICAgc28s
IGp1c3QgbmVlZCB0byBiZSBsaXR0bGUgY2hhbmdlZCB0byB0aG Ugb3RoZXIgQlNEJ3MpCgpUaW1l
bGlmZQo9PT09PT09PT09PT09PT09PT09CgogICAgIDExLzE1Lz IwMDYgLSBBZHZpc29yeSBQdWJs
aWMgRGlzY2xvdXN1cmUgKHNvcnJ5IGZvciB0aGUgZGV2ZWxvcG VycywgYnV0IHdlIAogICAgIGFy
ZSBqdXN0IHJlc3BlY3RpbmcgdGhlIE1vbnRoIG9mIEtlcm5lbC BCdWdzIFRpbWVsaWZlKQoKQWNr
bm93bGVkZ21lbnRzCj09PT09PT09PT09PT09PT09PT0KCiAgIC AgRmlsaXBlIEJhbGVzdHJhIDxm
aWxpcGVAYmFsZXN0cmEuY29tLmJyPiBhbmQgUm9kcmlnbyBSdW JpcmEgQnJhbmNvIAogICAgIChC
U0RhZW1vbikgPHJvZHJpZ29Aa2VybmVsaGFja2luZy5jb20+IG ZvciB0aGUgZGlzY292ZXJpbmcs
IGFuYWx5c2lzCiAgICAgYW5kIHBhdGNoLgoKQ29udGFjdCBJbm Zvcm1hdGlvbgo9PT09PT09PT09
PT09PT09PT09CgogICAgIFlvdSBjYW4gcmVhY2ggdGhlIGF1dG hvcnMgb2YgdGhpcyBhZHZpc29y
eSBieSBtYWlsIG9yIHZpc2l0aW5nIHNvbWUKICAgICB3ZWJzaX RlczoKCWh0dHA6Ly93d3cuYmFs
ZXN0cmEuY29tLmJyICAtPiBQZXJzb25hbCBXZWJzaXRlIG9mIE ZpbGlwZQoJaHR0cDovL3d3dy5y
aXNlc2VjdXJpdHkub3JnIC0+IFJJU0UgU2VjdXJpdHkgUmVzZW FyY2ggKFJvZHJpZ28gaXMgbWVt
YmVyICAgICBvZiB0aGUgUklTRSBTZWN1cml0eSBUZWFtKQoJaH R0cDovL3d3dy5rZXJuZWxoYWNr
aW5nLmNvbS9yb2RyaWdvIC0+IFBlcnNvbmFsIFdlYnNpdGUgb2 YgUm9kcmlnbwoKUmVmZXJlbmNl
cwo9PT09PT09PT09PT09PT09PT09CgogICAgIGh0dHA6Ly93d3 cua2VybmVsaGFja2luZy5jb20v
YnNkYWR2MS50eHQgLT4gQWN0dWFsIHZlcnNpb24gb2YgdGhlIG Fkdmlzb3J5CiAgICAgaHR0cDov
L3d3dy5yaXNlc2VjdXJpdHkub3JnL1JJU0UtMjAwNjAwMi50eH QgLT4gUmVsYXRlZCBpc3N1ZQoK
RGlzY2xhaW1lciAodGFrZW4gZnJvbSB0ZXNvLXRlYW0pCj09PT 09PT09PT09PT09PT09PT0KCiAg
ICAgVGhpcyBhZHZpc29yeSBkb2VzIG5vdCBjbGFpbSB0byBiZS Bjb21wbGV0ZSBvciB0byBiZSB1
c2FibGUgZm9yIGFueQogICAgIHB1cnBvc2UuIEVzcGVjaWFsbH kgaW5mb3JtYXRpb24gb24gdGhl
IHZ1bG5lcmFibGUgc3lzdGVtcyBtYXkgYmUKICAgICBpbmFjY3 VyYXRlIG9yIHdyb25nLiBUaGUg
c3VwcGxpZWQgZXhwbG9pdCBpcyBub3QgdG8gYmUgdXNlZCBmb3 IgbWFsaWNpb3VzCiAgICAgcHVy
cG9zZXMsIGJ1dCBmb3IgZWR1Y2F0aW9uYWwgcHVycG9zZXMgb2 5seS4KCiAgICAgVGhpcyBhZHZp
c29yeSBpcyBmcmVlIGZvciBvcGVuIGRpc3RyaWJ1dGlvbiBpbi B1bm1vZGlmaWVkIGZvcm0uCg==


----=_bff052b24ca663d984265d32e2865de3a
Content-Type: application/octet-stream; name="freebsd.txt.gpg"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="freebsd.txt.gpg"

owGNV01vHMcRlW34wHEMWEEQwPClkoM9K5C7pGwFiCTSJiXSXl gfBsmAsIVE6Jmp2e2wp3vQ3bPr
9ccxQI5GEPjgg/0Lcs4tueSUo65BbkHO+QfJ654ZLlekiCzIJae7q7r61avXNd+8/sq1l6//7Y8P
//Kbb/7+5kt/ev00e620zJkrhv5zv/8kfXaAx72j+ySUohlbJ412dCAtn+CXxo/vHT+gU7aaFUnt
ecKWDNaVyswxUBpbCQ8bKqTLlWlcYznZ2hpt3Rrd3Nz8RZI8Ml 7mnGxf/CSEz/FUOsqaCU0F/jJr
cjXnEtEsosuwFxeEfchPmR4a7adkSvq4DWmvmTgSuiBvoruw5i ORI2CHobN/7xldwo/OcaLxmNKp
9/Xt0Wg+nw+nN6f50NjJMLMj1qPBMEmSo6aqhF1cGnTcJuAzD/gUPMPpCGdgLTKFSDPEzaVolAc8
MZ4P9x/tH47vdSgOicY+LJGaXXQmdAdz2eg8YjmfynxKOSYypkoomUsgi wEVdqiFc1JPSJDmCcCf
MQAscb7oTbGeTD3NhGp42OEbH2gukeJsEcxjXN3KfMr5KaUZ56 JxHGfi+ugNxv0mg4hz64QJS4tw
QEG5qRem8WRqtpEKQPBo4TxXjnYRVu65uALJjn4RiHMUjJOP2P dzFyfvWzEx+gA8uWTy2DaIoID1
jdXJZFzVIvcvDigChh/Rsz6QMzIMwLh4rj4zualqayrp2rQrgwQFYGxLyRbAqjbWC+172 3M143pH
fe3AT5oJJ0OiF+sIoYJB0VQ13RnQIEn2P6+V0NH2/+BmKFdbCtCz28Y3WnPREhCBz2TBIVKSJvdq
yT7LOcsZGBbdVUIvQDkrKvaxqqbCnwEwFXoCjz1yjDpVURhcJE aBAWSpYhy/BFKU9uneCJUzKrtQ
R+Ucj8Oc0nL+tI0Gnz6gAX311TLbwTpr3FW2K4ZLDrV7Smbeev eX7y3tDk6ertbfYEClVHw7SdZk
SWmOyJ+iwjZ2UDF0N9TNIFlbCw/btDJ5J1lj5RiTqzbbFCcxa22waSsmrb1dP+cgPgbnd1o8TwLD
tLdGRe6tukylf8dFKQBpIJ3CTpqIM1QvrH4OiejQmfUz8ZA+Wi 0l5DKNCJVQkvMCxA2+U9PYVXGo
pI7KLFqp65XPaB50rDjCpmdmweSicvRRDgkQhCWtOqKoGLXCMZ DoqzcQ7nayFkJLKWaRtrfp0a8e
PKABfQnwh8MhvoOv7aCeqMv03uHjh0fjz/bX6eHTg5PwfbI7Pn78MbDu1tPXFHIXHbSm6czIgm4M
3o57bOzkziIFTzZ/fWbz9XnJuPwuREJFEYpMeB8vo7aegyadExTUubGLIJxGNVeXN+ 0GR9MWw5gi
UcykgzkQrYXHxdFfln2x3Rre6vli2fsFOaiS4vVWWAMrfgu1BB U43KOhsJX0Xp3Vd88pgy9L8PiO
gxgdy4qVLC+/2ttQl30Aim+3D/OTJsONRvfPgZRiAjN94ICbVbhP3Dpq3dOcWzEFy7mN1XJoE3xg
8gvbgj5AxLqbn2ozx+UZtchdEfKBVLJm2hOKnbeC7pZx4IOsGx hC9NEq7ESFPzSFlRNDh00msXbP
Cp2bLtQUOAmkFSp017brPmhvlCl4gMCDp53lkbteBxMQfi3Uwn WkjzvFxIIfaGSQfU/jJduuOMyn
polSbRmMiduIxk8NVBxQrXIH91clpCKEgxEZkXWmagsdCcgwxq HszrVOz2EChd2hT5A0g/ChXtEk
7NRiumJqcWk6zhsr/SJ0X8H0cHy0T0fdIB1iXliEnfYoB7nhKgMFwyeegJ8zOmZRDVY 2ugD5qEvG
i4LtdkuSQ+5axqvocuVO6LKB71botMNuu7lvxFkr0h+gz8AFf8 9DNApH3QjFtLl5s/d5yAriDC1w
DqKcxJoS4L2l1ItT3BPx2kXmzIaP2Lz4KMcrfCgMegNtcNUHf5 0shIZHccDJdiONC11vZDH6hNZR
3djaODSf+8tW/rw6mvaumDVKo2MM5q5rFysBInaUk1rkOLxod5tbA1Bji+GaulY SZ2Z0Qwb3mGwD
7QPq3hbO2uaVoDpBCQu4aPIYEHLSzyI2tRheCgj+D29O0RTSFE XeW5lFuQ5a3OjKFLKU7f7VMPn9
+6+8ei28YvXvX9df/t13177fuvufH/68927jfvLPN7746EevvTW/8eTa9z9/tvnsD6/u/fiv/1r/
9/V//PTbnz3477P/AQ==


----=_bff052b24ca663d984265d32e2865de3a
Content-Type: text/x-patch; name="bsd.patch"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="bsd.patch"

LS0tIGRldi9maXJld2lyZS9md2Rldi5jLm9yaWcJRnJpIE9jdC AxMyAxMzoxMjo0OSAyMDA2Cisr
KyBkZXYvZmlyZXdpcmUvZndkZXYuYwlGcmkgT2N0IDEzIDEzOj EzOjQyIDIwMDYKQEAgLTcxMiw3
ICs3MTIsNyBAQCBvdXQ6CiAJCQllbHNlCiAJCQkJbGVuID0gZn dkZXYtPnJvbW1heCAtIENTUlJP
TU9GRiArIDQ7CiAJCX0KLQkJaWYgKGNyb21fYnVmLT5sZW4gPC BsZW4pCisJCWlmIChjcm9tX2J1
Zi0+bGVuIDwgbGVuICYmIGNyb21fYnVmLT5sZW4gPiAwKQogCQ kJbGVuID0gY3JvbV9idWYtPmxl
bjsKIAkJZWxzZQogCQkJY3JvbV9idWYtPmxlbiA9IGxlbjsK


----=_bff052b24ca663d984265d32e2865de3a
Content-Type: application/octet-stream; name="bsd.patch.gpg"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="bsd.patch.gpg"

owGbwMvMwCR4ZIrvvrgJpyQZ1zIGJHEmFafoFSSWJGe4Rms81d XVVUhJLdNPyyxKLQdi/bRyIFcv
WS+/KDOd060oU8E/uUTB0BiIrAyNrEwsFYwMDMy4tLW1sWpD12FsZWIE0eHgoKBrbm ikY66gDaGA
AvmlJVZcCpycnKk5xalgBmdOap6CrQLYNF27ovzc3MQKBV0F5+ CgIH9ffzc3BW0FE2uQylouXU7O
zDQFjWSgovik0jRdO5BWGwUgqcmljVNOQU1NAVXYTsFAE2w3xG oUSbBVcMeh6rNVACvosGdmZQCF
JCyQBZlu6THMT/N7L1L0Riqm5Kx6z8K3VxV+Hj6TyDA/0lGa++iRaR58W69Gv+XV2Cg1f18HAA==



----=_bff052b24ca663d984265d32e2865de3a--