Feed
Breaking OpenBSD

Asking for a process command line could return leftover kernel memory

Brief

Empty copies are now an error in the copier, not something every caller has to notice.

Notes

source-changes (dgl@, 2026-08-19 20:11:18). sys/uvm/uvm_io.c. Treat a zero-length uvm_io copy as an error so sysctl_proc_args cannot return uninitialized memory. ok kettenis. Initial report from Acts1631.

cvsweb. No OpenBSD src SHA on GitHub or Codeberg. Do not invent one.

bluhm@ committed the same empty-copy-is-an-error text onto the 7.8 and 7.9 branches on 2026-08-20. msg162844 is OPENBSD_7_8 sys/uvm/uvm_io.c, named errata/7.8/048_kernproc.patch.sig. msg162845 is OPENBSD_7_9 sys/uvm/uvm_io.c, named errata/7.9/012_kernproc.patch.sig. from dgl@; OK kettenis@; initial report from Acts1631.

Official errata79 012 and errata78 048 are SECURITY FIX, dated August 22, 2026. Pages Last-Modified Sun 23 Aug 2026 07:08:33 GMT.

Commit msg162838

Sources