Page MenuHomeFreeBSD

timerfd: Use saturating sbintime conversions
ClosedPublic

Authored by jfree on Mar 10 2026, 12:51 AM.
Tags
None
Referenced Files
Unknown Object (File)
Sun, Jun 7, 9:47 AM
Unknown Object (File)
Thu, Jun 4, 10:02 PM
Unknown Object (File)
Wed, May 27, 7:33 AM
Unknown Object (File)
Sun, May 17, 3:25 PM
Unknown Object (File)
Sun, May 17, 11:36 AM
Unknown Object (File)
Sun, May 17, 11:36 AM
Unknown Object (File)
Sat, May 16, 10:44 PM
Unknown Object (File)
Sat, May 16, 7:38 PM
Subscribers

Details

Summary

Some timerfd consumers set expirations with timespec tv_sec components
larger than 2^31 - 1. In such cases, converting that timespec to
sbintime results in data loss or sign flip, yielding a shorter
expiration than desired.

To avoid this problem, use saturating timespec-to-sbintime conversion
functions. These will clamp the converted sbintime to SBT_MAX under
circumstances where the normal conversion functions would overflow.

Saturating conversions still result in data loss, but the consequences
are less severe, causing problems only after SBT_MAX (~68 years) of
system uptime elapses.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 71573
Build 68456: arc lint + arc unit

Event Timeline

This revision is now accepted and ready to land.Mar 10 2026, 1:11 AM

Is this covered by the timerfd tests you posted already?

sys/kern/sys_timerfd.c
404

Do you need to catch overflow here too?

Saturate next expiration sbintime

This revision now requires review to proceed.Mar 20 2026, 6:36 AM
This revision is now accepted and ready to land.Mar 20 2026, 6:41 AM
This revision was automatically updated to reflect the committed changes.