Page MenuHomeFreeBSD

bhyve nvme: Fix Controller init error cases
ClosedPublic

Authored by chuck on Jun 10 2022, 9:11 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sat, Apr 13, 10:45 PM
Unknown Object (File)
Mar 18 2024, 2:30 PM
Unknown Object (File)
Feb 10 2024, 2:58 PM
Unknown Object (File)
Dec 22 2023, 11:39 PM
Unknown Object (File)
Sep 19 2023, 11:47 PM
Unknown Object (File)
Aug 25 2023, 7:37 AM
Unknown Object (File)
Aug 10 2023, 12:43 AM
Unknown Object (File)
Jul 10 2023, 4:24 AM
Subscribers

Details

Summary

Fuzzing of bhyve uncovered an assertion failure in the NVMe emulation.
Investigation uncovered several corner cases the code did not handle.
This change handles several Controller initialization errors, including

  • bad AQ sizes
  • bad AQ vm_map_gpa
  • doorbell writes prior to RDY
  • doorbell writes to uninitialized queue
  • CSTS.RDY if CFS set

PR: 256317,256319,256320,256322
Reported by: Cheolwoo Myung <cwmyung@snu.ac.kr>

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable