Page MenuHomeFreeBSD

timerfd: Use saturating sbintime conversions
ClosedPublic

Authored by jfree on Mar 10 2026, 12:51 AM.
Tags
None
Referenced Files
F154998451: D55792.id.diff
Thu, Apr 30, 2:20 PM
Unknown Object (File)
Wed, Apr 29, 1:11 PM
Unknown Object (File)
Wed, Apr 29, 3:39 AM
Unknown Object (File)
Wed, Apr 29, 2:06 AM
Unknown Object (File)
Wed, Apr 29, 2:03 AM
Unknown Object (File)
Tue, Apr 28, 7:08 PM
Unknown Object (File)
Tue, Apr 28, 7:04 PM
Unknown Object (File)
Mon, Apr 27, 11:40 PM
Subscribers

Details

Summary

Some timerfd consumers set expirations with timespec tv_sec components
larger than 2^31 - 1. In such cases, converting that timespec to
sbintime results in data loss or sign flip, yielding a shorter
expiration than desired.

To avoid this problem, use saturating timespec-to-sbintime conversion
functions. These will clamp the converted sbintime to SBT_MAX under
circumstances where the normal conversion functions would overflow.

Saturating conversions still result in data loss, but the consequences
are less severe, causing problems only after SBT_MAX (~68 years) of
system uptime elapses.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 71573
Build 68456: arc lint + arc unit

Event Timeline

This revision is now accepted and ready to land.Mar 10 2026, 1:11 AM

Is this covered by the timerfd tests you posted already?

sys/kern/sys_timerfd.c
404

Do you need to catch overflow here too?

Saturate next expiration sbintime

This revision now requires review to proceed.Mar 20 2026, 6:36 AM
This revision is now accepted and ready to land.Mar 20 2026, 6:41 AM
This revision was automatically updated to reflect the committed changes.