Page MenuHomeFreeBSD

unix: Fix handling of listening sockets during garbage collection
ClosedPublic

Authored by markj on Nov 13 2025, 7:42 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sat, May 23, 3:52 PM
Unknown Object (File)
Tue, May 19, 9:05 PM
Unknown Object (File)
Thu, May 14, 2:41 PM
Unknown Object (File)
Mon, May 11, 8:32 PM
Unknown Object (File)
Mon, May 11, 8:31 PM
Unknown Object (File)
Mon, May 11, 7:36 PM
Unknown Object (File)
Mon, May 11, 7:19 PM
Unknown Object (File)
Thu, May 7, 3:46 PM
Subscribers

Details

Summary

socantrcvmore() and unp_dispose() assume that the socket's socket
buffers are initialized, which isn't the case for listening sockets.

Reported by: syzbot+a62883292a5c257703be@syzkaller.appspotmail.com

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable