Skip to content

CVE-2017-2388: Null-pointer dereference in IOFireWireFamily.

Notifications You must be signed in to change notification settings

bazad/IOFireWireFamily-null-deref

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 

Repository files navigation

IOFireWireFamily-null-deref

IOFireWireFamily-null-deref is a proof-of-concept exploit for CVE-2017-2388, a NULL pointer derefererence in IOFireWireUserClient that was fixed in macOS Sierra 10.12.4. This vulnerability can be triggered to cause denial of service on devices with a FireWire port.

CVE-2017-2388

The function IOFireWireUserClient::setAsyncRef_IsochChannelForceStop did not check that the parameter inAsyncRef is non-NULL before calling bcopy with inAsyncRef as the source.

License

The IOFireWireFamily-null-deref code is released into the public domain. As a courtesy I ask that if you reference or use any of this code you attribute it to me.

About

CVE-2017-2388: Null-pointer dereference in IOFireWireFamily.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published