Page MenuHomeFreeBSD

timerfd: Use saturating sbintime conversions
ClosedPublic

Authored by jfree on Mar 10 2026, 12:51 AM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Oct 13, 5:23 AM
Unknown Object (File)
Fri, Oct 2, 4:23 PM
Unknown Object (File)
Fri, Oct 2, 3:57 AM
Unknown Object (File)
Fri, Oct 2, 3:51 AM
Unknown Object (File)
Sep 18 2026, 8:36 AM
Unknown Object (File)
Sep 16 2026, 6:54 PM
Unknown Object (File)
Sep 11 2026, 1:11 PM
Unknown Object (File)
Sep 10 2026, 6:47 PM
Subscribers

Details

Summary

Some timerfd consumers set expirations with timespec tv_sec components
larger than 2^31 - 1. In such cases, converting that timespec to
sbintime results in data loss or sign flip, yielding a shorter
expiration than desired.

To avoid this problem, use saturating timespec-to-sbintime conversion
functions. These will clamp the converted sbintime to SBT_MAX under
circumstances where the normal conversion functions would overflow.

Saturating conversions still result in data loss, but the consequences
are less severe, causing problems only after SBT_MAX (~68 years) of
system uptime elapses.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 71306
Build 68189: arc lint + arc unit

Event Timeline

This revision is now accepted and ready to land.Mar 10 2026, 1:11 AM

Is this covered by the timerfd tests you posted already?

sys/kern/sys_timerfd.c
404

Do you need to catch overflow here too?

Saturate next expiration sbintime

This revision now requires review to proceed.Mar 20 2026, 6:36 AM
This revision is now accepted and ready to land.Mar 20 2026, 6:41 AM
This revision was automatically updated to reflect the committed changes.