Page MenuHomeFreeBSD

lio_listio: Don't post a completion notification if none was requested
ClosedPublic

Authored by markj on Jul 15 2021, 6:11 PM.
Tags
None
Referenced Files
Unknown Object (File)
Fri, Jul 3, 1:50 PM
Unknown Object (File)
Thu, Jul 2, 10:16 AM
Unknown Object (File)
Tue, Jun 30, 8:57 PM
Unknown Object (File)
Sun, Jun 28, 1:21 PM
Unknown Object (File)
May 24 2026, 12:41 AM
Unknown Object (File)
May 17 2026, 5:45 PM
Unknown Object (File)
May 13 2026, 12:48 PM
Unknown Object (File)
May 11 2026, 10:02 AM
Subscribers

Details

Summary

One is allowed to use LIO_NOWAIT without specifying a sigevent. In this
case, lj->lioj_signal is left uninitialized, but several code paths
examine liov_signal.sigev_notify to figure out which notification to
post. Unconditionally initialize that field to SIGEV_NONE.

Add a dumb test case which triggers the bug.

Reported by: KMSAN+syzkaller
MFC after: 2 weeks
Sponsored by: The FreeBSD Foundation

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable