Differential D55179

loader.efi: free_tables() appears to free tss_pa twice.
ClosedPublic
Actions

Authored by tsoome on Feb 8 2026, 11:02 AM.

Tags

None

Referenced Files

	F156661940: D55179.id171447.diff
	Fri, May 15, 12:23 PM

	F156630716: D55179.id.diff
	Fri, May 15, 6:12 AM

	F156621561: D55179.id172383.diff
	Fri, May 15, 4:35 AM

	Unknown Object (File)
	Tue, May 12, 6:00 AM

	Unknown Object (File)
	Tue, May 12, 1:43 AM

	Unknown Object (File)
	Tue, May 12, 1:02 AM

	Unknown Object (File)
	Tue, May 12, 12:36 AM

	Unknown Object (File)
	Sun, May 3, 9:49 PM

View All 28 Files

Subscribers

Details

Reviewers

manu
kib

Commits

rGf2186bbd63fc: loader.efi: free_tables() appears to free tss_pa twice.

Summary

we check and reset loader_gdt_pa, but use FreePages(tss_pa).

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

tsoome created this revision.Feb 8 2026, 11:02 AM

Herald added a reviewer: manu. · View Herald TranscriptFeb 8 2026, 11:02 AM

Herald added subscribers: dab, bcran, imp. · View Herald Transcript

tsoome requested review of this revision.Feb 8 2026, 11:02 AM

tsoome added a parent revision: D55178: loader.efi: tss_pa setup seems to be flawed in trap.c.

tsoome added a child revision: D55180: loader.efi: efi_redirect_exceptions does use uninitialized pointer.

Harbormaster completed remote builds in B70517: Diff 171447.Feb 8 2026, 11:02 AM

Those 4 updates are about problems what I have found from trap.c, however, since I'm getting fault with ungrab_faults, there must be something more. Typo fix is trivial and I guess I can just push that one:D

kib accepted this revision.Feb 8 2026, 12:09 PM

This revision is now accepted and ready to land.Feb 8 2026, 12:09 PM

Closed by commit rGf2186bbd63fc: loader.efi: free_tables() appears to free tss_pa twice. (authored by tsoome). · Explain WhyFeb 21 2026, 3:23 PM

This revision was automatically updated to reflect the committed changes.

tsoome added a commit: rGf2186bbd63fc: loader.efi: free_tables() appears to free tss_pa twice..

bms added a subscriber: bms.Feb 21 2026, 3:52 PM

Revision Contents
Changeset List

Path

Size

stand/

efi/

loader/

arch/

amd64/

9 lines

Diff 172383

stand/efi/loader/arch/amd64/trap.c

Loading...