Page MenuHomeFreeBSD
Differential D55369

arm64 iommu: fixes
Needs ReviewPublic
Actions

Authored by br on Feb 19 2026, 2:37 PM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Jun 16, 2:18 AM
Unknown Object (File)
Mon, Jun 15, 8:12 AM
Unknown Object (File)
May 14 2026, 11:44 PM
Unknown Object (File)
May 14 2026, 10:24 PM
Unknown Object (File)
May 12 2026, 3:10 PM
Unknown Object (File)
May 8 2026, 10:06 AM
Unknown Object (File)
May 7 2026, 5:56 PM
Unknown Object (File)
Apr 28 2026, 3:28 AM
View All 29 Files
Subscribers
emaste

Details

Reviewers
andrew
manu
Summary
  1. fix use after free (dereference of ioctx after freeing it)
  2. tag is destroyed by iommu_bus_dma_tag_destroy() after calling to iommu_free_ctx_locked() here https://github.com/freebsd/freebsd-src/blob/main/sys/dev/iommu/busdma_iommu.c#L450
Test Plan

Tested on RISC-V IOMMU

Diff Detail

Lint
Lint Skipped
Unit
Tests Skipped

Revision Contents
Changeset List

PathSize
sys/
arm64/
iommu/
10 lines

Diff 172232

View Options

sys/arm64/iommu/iommu.c

Loading...