untrusted comment: verify with openbsd-75-base.pub RWRGj1pRpprAfsncmkHqXJApaYJMPP6ypAGDQga4nji/DTl7JQTtN/xLe6txjJw6KSLSluXOFQ5+iJ8pYzV74kEyiNY+6hRxDAc= OpenBSD 7.5 errata 005, August 2, 2024: sndiod(8) main process could crash due to buffer overread. Apply by doing: signify -Vep /etc/signify/openbsd-75-base.pub -x 005_sndiod.patch.sig \ -m - | (cd /usr/src && patch -p0) And then rebuild and install sndiod: cd /usr/src/usr.bin/sndiod make obj make make install Index: usr.bin/sndiod/sock.c =================================================================== RCS file: /cvs/src/usr.bin/sndiod/sock.c,v diff -u -p -r1.47 sock.c --- usr.bin/sndiod/sock.c 26 Dec 2022 19:16:03 -0000 1.47 +++ usr.bin/sndiod/sock.c 31 Jul 2024 11:59:43 -0000 @@ -988,7 +988,7 @@ sock_execmsg(struct sock *f) struct slot *s = f->slot; struct amsg *m = &f->rmsg; unsigned char *data; - int size, ctl; + unsigned int size, ctl; switch (ntohl(m->cmd)) { case AMSG_DATA: @@ -1020,7 +1020,7 @@ sock_execmsg(struct sock *f) return 0; } size = ntohl(m->u.data.size); - if (size <= 0) { + if (size == 0) { #ifdef DEBUG if (log_level >= 1) { sock_log(f);