Page MenuHomeFreeBSD

unix: Fix handling of listening sockets during garbage collection
ClosedPublic

Authored by markj on Thu, Nov 13, 7:42 PM.
Tags
None
Referenced Files
F136224552: D53743.id166401.diff
Sun, Nov 16, 6:16 PM
F136224534: D53743.id166385.diff
Sun, Nov 16, 6:16 PM
F136209800: D53743.id166401.diff
Sun, Nov 16, 4:38 PM
F136209795: D53743.id166385.diff
Sun, Nov 16, 4:38 PM
F136209794: D53743.id.diff
Sun, Nov 16, 4:38 PM
F136192667: D53743.diff
Sun, Nov 16, 2:36 PM
Unknown Object (File)
Fri, Nov 14, 8:57 PM
Unknown Object (File)
Fri, Nov 14, 8:57 PM
Subscribers

Details

Summary

socantrcvmore() and unp_dispose() assume that the socket's socket
buffers are initialized, which isn't the case for listening sockets.

Reported by: syzbot+a62883292a5c257703be@syzkaller.appspotmail.com

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 68617
Build 65500: arc lint + arc unit