Page MenuHomeFreeBSD

netmap: Handle overflow when computing ring sizes
ClosedPublic

Authored by markj on Wed, Aug 5, 5:37 PM.

Details

Summary

PR: 297300
Reported by: Robert Morris
Reported by: syzkaller

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

markj requested review of this revision.Wed, Aug 5, 5:37 PM
vmaffione added inline comments.
sys/dev/netmap/netmap_mem2.c
2024

Aren't we missing len += sizeof(struct netmap_ring) ?

This revision now requires changes to proceed.Thu, Aug 6, 7:16 AM
This revision is now accepted and ready to land.Fri, Aug 7, 1:35 PM