loader.efi: efi_redirect_exceptions does use uninitialized pointer
ClosedPublic
Actions

Authored by tsoome on Feb 8 2026, 11:02 AM.

Tags

None

Referenced Files

	F163027973: D55180.id171448.diff
	Sun, Jul 19, 8:53 AM

	F162980393: D55180.id171448.diff
	Sat, Jul 18, 9:40 PM

	Unknown Object (File)
	Sat, Jul 18, 12:44 PM

	Unknown Object (File)
	Wed, Jul 15, 5:42 AM

	Unknown Object (File)
	Wed, Jul 15, 5:42 AM

	Unknown Object (File)
	Mon, Jul 6, 11:01 AM

	Unknown Object (File)
	Mon, Jul 6, 8:01 AM

	Unknown Object (File)
	Sun, Jul 5, 9:43 PM

Subscribers

Details

Reviewers

manu
kib

Commits

rG23605a8e5124: loader.efi: efi_redirect_exceptions does use uninitialized pointer

Summary

loader_idt.rd_base is not set when we are attempting to bcopy(),
resulting to data stored to page 0 and therefore corrupting it.

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Skipped

Unit

Tests Skipped

Build Status

Buildable 70518
Build 67401: arc lint + arc unit

Event Timeline

tsoome created this revision.Feb 8 2026, 11:02 AM

Herald added a reviewer: manu. · View Herald TranscriptFeb 8 2026, 11:02 AM

Herald added subscribers: dab, bcran, imp. · View Herald Transcript

tsoome requested review of this revision.Feb 8 2026, 11:02 AM

tsoome added a parent revision: D55179: loader.efi: free_tables() appears to free tss_pa twice..

Harbormaster completed remote builds in B70518: Diff 171448.Feb 8 2026, 11:02 AM

kib accepted this revision.Feb 8 2026, 12:03 PM

This revision is now accepted and ready to land.Feb 8 2026, 12:03 PM

Closed by commit rG23605a8e5124: loader.efi: efi_redirect_exceptions does use uninitialized pointer (authored by tsoome). · Explain WhyFeb 21 2026, 3:30 PM

This revision was automatically updated to reflect the committed changes.

tsoome added a commit: rG23605a8e5124: loader.efi: efi_redirect_exceptions does use uninitialized pointer.

bms added a subscriber: bms.Feb 21 2026, 3:51 PM

Revision Contents
Changeset List

Path

Size

stand/

efi/

loader/

arch/

amd64/

trap.c

1 line

Diff 171448

View Options

stand/efi/loader/arch/amd64/trap.c

loader.efi: efi_redirect_exceptions does use uninitialized pointerClosedPublicActions