Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://mastodon.sdf.org/users/netbsd/statuses/114245295918566427">NetBSD Foundation ? (netbsd@mastodon.sdf.org)'s status on Saturday, 29-Mar-2025 20:20:04 JST</a><a href="https://mastodon.sdf.org/@netbsd" title="netbsd@mastodon.sdf.org"><img src="https://gnusocial.jp/avatar/4773-48-20220812151638.webp" width="48" height="48" alt="NetBSD Foundation ?" style="position: absolute; left: 0; top: 0;">NetBSD Foundation ?</a></section><article><p>Riastradh has added additional runtime checks to the ctype functions, which are a libc feature that is commonly used incorrectly. </p><p>This includes guard page exploit mitigations.</p><p><a href="https://freshbsd.org/netbsd/src/commit/FzouP6F1eaQTSROF" rel="nofollow noreferrer">https://freshbsd.org/netbsd/src/commit/FzouP6F1eaQTSROF</a><br><a href="https://freshbsd.org/netbsd/src/commit/BCljW4bJuFO5QTOF" rel="nofollow noreferrer">https://freshbsd.org/netbsd/src/commit/BCljW4bJuFO5QTOF</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/4812145#notice-9425825">In conversation</a><time datetime="2025-03-29T20:20:04+09:00" title="Saturday, 29-Mar-2025 20:20:04 JST">about a year ago</time> <span>from <span><a href="https://mastodon.sdf.org/@netbsd/114245295918566427" rel="external" title="Sent from mastodon.sdf.org via ActivityPub">mastodon.sdf.org</a></span></span><a href="https://mastodon.sdf.org/@netbsd/114245295918566427">permalink</a><h4>Attachments</h4><ol><li><article><header><div>No result found on File_thumbnail lookup.</div><h5><a href="https://freshbsd.org/netbsd/src/commit/BCljW4bJuFO5QTOF">NetBSD / src / BCljW4b / ctype(3): Summon a demon from caller's nose if abused out-of-line. - FreshBSD</a></h5><div></div></header><div></div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
NetBSD Foundation ? (netbsd@mastodon.sdf.org)'s status on Saturday, 29-Mar-2025 20:20:04 JST NetBSD Foundation ?
Riastradh has added additional runtime checks to the ctype functions, which are a libc feature that is commonly used incorrectly.
This includes guard page exploit mitigations.
https://freshbsd.org/netbsd/src/commit/FzouP6F1eaQTSROF
https://freshbsd.org/netbsd/src/commit/BCljW4bJuFO5QTOF
In conversationabout a year ago from mastodon.sdf.orgpermalink
Attachments
1. No result found on File_thumbnail lookup.
  NetBSD / src / BCljW4b / ctype(3): Summon a demon from caller's nose if abused out-of-line. - FreshBSD

Public

Embed Notice

HTML Code

Corresponding Notice