Page MenuHomeFreeBSD

netmap: Handle overflow when computing ring sizes
ClosedPublic

Authored by markj on Aug 5 2026, 5:37 PM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Sep 14, 12:56 PM
Unknown Object (File)
Sun, Sep 13, 3:19 PM
Unknown Object (File)
Sun, Sep 13, 10:31 AM
Unknown Object (File)
Sat, Sep 12, 12:41 AM
Unknown Object (File)
Sat, Sep 12, 12:04 AM
Unknown Object (File)
Fri, Sep 11, 6:56 AM
Unknown Object (File)
Fri, Sep 11, 2:12 AM
Unknown Object (File)
Tue, Sep 8, 7:36 PM

Details

Summary

PR: 297300
Reported by: Robert Morris
Reported by: syzkaller

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

markj requested review of this revision.Aug 5 2026, 5:37 PM
vmaffione added inline comments.
sys/dev/netmap/netmap_mem2.c
2024

Aren't we missing len += sizeof(struct netmap_ring) ?

This revision now requires changes to proceed.Aug 6 2026, 7:16 AM
This revision is now accepted and ready to land.Aug 7 2026, 1:35 PM