Page MenuHomeFreeBSD

netmap: Handle overflow when computing ring sizes
ClosedPublic

Authored by markj on Wed, Aug 5, 5:37 PM.
Tags
None
Referenced Files
F168852505: D58678.diff
Sun, Aug 30, 11:16 AM
Unknown Object (File)
Thu, Aug 27, 12:33 PM
Unknown Object (File)
Tue, Aug 25, 1:51 PM
Unknown Object (File)
Tue, Aug 25, 10:55 AM
Unknown Object (File)
Mon, Aug 24, 6:42 PM
Unknown Object (File)
Mon, Aug 24, 1:38 AM
Unknown Object (File)
Fri, Aug 21, 9:23 PM
Unknown Object (File)
Fri, Aug 21, 7:55 PM

Details

Summary

PR: 297300
Reported by: Robert Morris
Reported by: syzkaller

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 75416
Build 72299: arc lint + arc unit

Event Timeline

markj requested review of this revision.Wed, Aug 5, 5:37 PM
vmaffione added inline comments.
sys/dev/netmap/netmap_mem2.c
2024

Aren't we missing len += sizeof(struct netmap_ring) ?

This revision now requires changes to proceed.Thu, Aug 6, 7:16 AM
This revision is now accepted and ready to land.Fri, Aug 7, 1:35 PM