vfs: Avoid integer overflow when faulting
AcceptedPublic
Actions

Authored by des on Sep 4 2026, 6:44 PM.

Tags

None

Referenced Files

	Unknown Object (File)
	Sat, Oct 10, 3:16 AM

	Unknown Object (File)
	Fri, Oct 9, 9:57 PM

	Unknown Object (File)
	Fri, Oct 9, 9:47 PM

	Unknown Object (File)
	Fri, Oct 9, 9:47 PM

	Unknown Object (File)
	Wed, Oct 7, 11:35 AM

	Unknown Object (File)
	Sat, Oct 3, 11:47 PM

	Unknown Object (File)
	Thu, Oct 1, 9:43 AM

	Unknown Object (File)
	Thu, Oct 1, 4:27 AM

View All 40 Files

Subscribers

imp

olce

Details

Reviewers

kib
markj
olce

Summary

PR: 298159
MFC after: 1 week

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Skipped

Unit

Tests Skipped

Build Status

Buildable 76522
Build 73405: arc lint + arc unit

Event Timeline

des created this revision.Sep 4 2026, 6:44 PM

Herald added subscribers: olce, imp. · View Herald TranscriptSep 4 2026, 6:44 PM

des requested review of this revision.Sep 4 2026, 6:44 PM

Harbormaster completed remote builds in B76522: Diff 185852.Sep 4 2026, 6:44 PM

des added a child revision: D59413: uiomove: Use size_t for the length argument.Sep 4 2026, 6:44 PM

kib accepted this revision.Sep 4 2026, 7:40 PM

This revision is now accepted and ready to land.Sep 4 2026, 7:40 PM

olce accepted this revision.Sep 4 2026, 9:47 PM

So this commit message needs to briefly summarize the bug information, specifically, that uiomove takes an int, while uio_resid is a size_t.

des mentioned this in D59413: uiomove: Use size_t for the length argument.Sep 5 2026, 11:12 PM

Revision Contents
Changeset List

Path

Size

sys/

kern/

vfs_vnops.c

8 lines

Diff 185852

View Options

vfs: Avoid integer overflow when faultingAcceptedPublicActions