From 3b7038d8840bae1509cd2baeb578737f9c0f0fea Mon Sep 17 00:00:00 2001 From: Sylvain Kerjean Date: Tue, 2 Dec 2025 21:23:05 +0100 Subject: [PATCH] [Network] Clear buffer before use. Clean unix address buffer before use : more robust to bad user addresses missing trailing '\0', and prevents leaking data Change-Id: I769b895327f97870886309a7054facd3c169fb7f Reviewed-on: https://review.haiku-os.org/c/haiku/+/10052 Reviewed-by: Adrien Destugues Tested-by: Commit checker robot Reviewed-by: waddlesplash --- src/system/kernel/fs/socket.cpp | 1 + 1 file changed, 1 insertion(+) diff --git a/src/system/kernel/fs/socket.cpp b/src/system/kernel/fs/socket.cpp index 5c2ec81d3f..78f84c7972 100644 --- a/src/system/kernel/fs/socket.cpp +++ b/src/system/kernel/fs/socket.cpp @@ -1099,6 +1099,7 @@ _user_sendto(int socket, const void *data, size_t length, int flags, // copy address from userland char address[MAX_SOCKET_ADDRESS_LENGTH]; + memset(address, 0, MAX_SOCKET_ADDRESS_LENGTH); if (userAddress != NULL) { if (!IS_USER_ADDRESS(userAddress) || user_memcpy(address, userAddress, addressLength) != B_OK) {