Page MenuHomeFreeBSD

unix: Fix handling of listening sockets during garbage collection
ClosedPublic

Authored by markj on Nov 13 2025, 7:42 PM.
Tags
None
Referenced Files
F151243617: D53743.id166401.diff
Tue, Apr 7, 2:05 AM
Unknown Object (File)
Mon, Apr 6, 4:55 PM
Unknown Object (File)
Mon, Apr 6, 12:10 AM
Unknown Object (File)
Fri, Apr 3, 11:58 PM
Unknown Object (File)
Sat, Mar 28, 11:19 AM
Unknown Object (File)
Wed, Mar 25, 1:48 AM
Unknown Object (File)
Mon, Mar 23, 11:52 PM
Unknown Object (File)
Sat, Mar 21, 2:29 AM
Subscribers

Details

Summary

socantrcvmore() and unp_dispose() assume that the socket's socket
buffers are initialized, which isn't the case for listening sockets.

Reported by: syzbot+a62883292a5c257703be@syzkaller.appspotmail.com

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 68617
Build 65500: arc lint + arc unit