CVE-2017-2388 PoC — Apple macOS Sierra IOFireWireFamily 安全漏洞

Source

Associated Vulnerability

Description

CVE-2017-2388: Null-pointer dereference in IOFireWireFamily.

Readme

## IOFireWireFamily-null-deref

IOFireWireFamily-null-deref is a proof-of-concept exploit for CVE-2017-2388, a NULL pointer
derefererence in `IOFireWireUserClient` that was fixed in [macOS Sierra 10.12.4]. This
vulnerability can be triggered to cause denial of service on devices with a FireWire port.

[macOS Sierra 10.12.4]: https://support.apple.com/en-us/HT207615

### CVE-2017-2388

The function `IOFireWireUserClient::setAsyncRef_IsochChannelForceStop` did not check that the
parameter `inAsyncRef` is non-NULL before calling `bcopy` with `inAsyncRef` as the source.

### License

The IOFireWireFamily-null-deref code is released into the public domain. As a courtesy I ask that
if you reference or use any of this code you attribute it to me.

File Snapshot

 [4.0K]  /data/pocs/cb7f4ea49ebef532096e2fddd8577675547ebff3
├── [1.1K]  IOFireWireFamily-null-deref.c
├── [ 215]  Makefile
└── [ 750]  README.md

0 directories, 3 files

Remarks