Page MenuHomeFreeBSD

bhyve nvme: Fix Controller init error cases
ClosedPublic

Authored by chuck on Jun 10 2022, 9:11 PM.
Tags
None
Referenced Files
Unknown Object (File)
Jan 18 2025, 9:33 PM
Unknown Object (File)
Jan 17 2025, 12:19 AM
Unknown Object (File)
Jan 3 2025, 10:22 PM
Unknown Object (File)
Dec 2 2024, 9:11 PM
Unknown Object (File)
Nov 18 2024, 12:39 AM
Unknown Object (File)
Nov 18 2024, 12:39 AM
Unknown Object (File)
Nov 17 2024, 10:42 PM
Unknown Object (File)
Oct 3 2024, 10:00 AM
Subscribers

Details

Summary

Fuzzing of bhyve uncovered an assertion failure in the NVMe emulation.
Investigation uncovered several corner cases the code did not handle.
This change handles several Controller initialization errors, including

  • bad AQ sizes
  • bad AQ vm_map_gpa
  • doorbell writes prior to RDY
  • doorbell writes to uninitialized queue
  • CSTS.RDY if CFS set

PR: 256317,256319,256320,256322
Reported by: Cheolwoo Myung <cwmyung@snu.ac.kr>

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable