OS X IOKit kernel code execution due to NULL pointer dereference in IOHIKeyboardMapper::stickyKeysfree about google-security-research HOT 5 CLOSED

Original comment by [email protected] on 30 Jun 2014 at 3:32

• Added labels: Reported-2014-June-30, Id-607551979

from google-security-research.

Original comment by [email protected] on 22 Aug 2014 at 9:38

• Added labels: Deadline-90

from google-security-research.

http://support.apple.com/kb/HT6441 (i.e. also affected iOS)
No mention of CVE in OS X update (http://support.apple.com/kb/HT6443) ??

Original comment by [email protected] on 23 Sep 2014 at 9:39

• Added labels: Reported-2014-Jun-30, CVE-2014-4405, Product-iOS-Kernel
• Removed labels: Reported-2014-June-30

from google-security-research.

Original comment by [email protected] on 24 Sep 2014 at 9:43

• Removed labels: Restrict-View-Commit

from google-security-research.

Interesting case.
Looks like it wasn't fixed in OS X until Yosemite: 
https://support.apple.com/kb/HT6535. Therefore, it can be observed:

1) By declaring this in the earlier iOS patch, Apple dropped on bug on their 
own OS X software.

2) The original report was against OS X, not iOS, so this definitely went well 
over deadline. Marking as such.

Original comment by [email protected] on 17 Oct 2014 at 7:03

• Changed state: Fixed
• Added labels: Deadline-Exceeded, Fixed-2014-Oct-16

from google-security-research.