Page MenuHomeFreeBSD

LinuxKPI: fix sg_pcopy_from_buffer()
ClosedPublic

Authored by bz on Jun 7 2021, 3:16 PM.
Tags
None
Referenced Files
Unknown Object (File)
Fri, Sep 18, 3:59 PM
Unknown Object (File)
Fri, Sep 18, 2:51 AM
Unknown Object (File)
Fri, Sep 18, 12:49 AM
Unknown Object (File)
Sun, Sep 6, 11:05 AM
Unknown Object (File)
Sun, Sep 6, 5:45 AM
Unknown Object (File)
Sat, Sep 5, 9:48 AM
Unknown Object (File)
Sat, Sep 5, 6:45 AM
Unknown Object (File)
Thu, Sep 3, 9:27 PM
Subscribers

Details

Summary

In sg_pcopy_from_buffer() is an error in that skip can underflow
and lead to bogus page arithmetics which may lead to memory corruption
or more likely panics. Once we found a s/g page to copy into there
is nothing to skip anymore so simply set skip to 0.

Sponsored by: The FreeBSD Foundation
MFC after: 5 days

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable