Page MenuHomeFreeBSD

netmap: Handle overflow when computing ring sizes
ClosedPublic

Authored by markj on Aug 5 2026, 5:37 PM.
Tags
None
Referenced Files
F176659262: D58678.id183475.diff
Tue, Oct 20, 3:44 PM
Unknown Object (File)
Wed, Oct 14, 7:54 PM
Unknown Object (File)
Mon, Oct 12, 5:16 AM
Unknown Object (File)
Sat, Oct 10, 4:43 PM
Unknown Object (File)
Sat, Oct 10, 4:38 PM
Unknown Object (File)
Sat, Oct 10, 4:38 PM
Unknown Object (File)
Sat, Oct 10, 4:35 PM
Unknown Object (File)
Fri, Oct 9, 9:07 AM

Details

Summary

PR: 297300
Reported by: Robert Morris
Reported by: syzkaller

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 75416
Build 72299: arc lint + arc unit

Event Timeline

markj requested review of this revision.Aug 5 2026, 5:37 PM
vmaffione added inline comments.
sys/dev/netmap/netmap_mem2.c
2024

Aren't we missing len += sizeof(struct netmap_ring) ?

This revision now requires changes to proceed.Aug 6 2026, 7:16 AM
This revision is now accepted and ready to land.Aug 7 2026, 1:35 PM