Page MenuHomeFreeBSD

LinuxKPI: fix sg_pcopy_from_buffer()
ClosedPublic

Authored by bz on Jun 7 2021, 3:16 PM.
Tags
None
Referenced Files
F169295975: D30676.id90526.diff
Tue, Sep 1, 3:46 AM
F169286274: D30676.id91072.diff
Tue, Sep 1, 3:24 AM
Unknown Object (File)
Sun, Aug 30, 2:10 PM
Unknown Object (File)
Sun, Aug 30, 9:46 AM
Unknown Object (File)
Wed, Aug 26, 1:33 PM
Unknown Object (File)
Tue, Aug 25, 8:00 PM
Unknown Object (File)
Tue, Aug 25, 12:45 PM
Unknown Object (File)
Tue, Aug 25, 12:36 PM
Subscribers

Details

Summary

In sg_pcopy_from_buffer() is an error in that skip can underflow
and lead to bogus page arithmetics which may lead to memory corruption
or more likely panics. Once we found a s/g page to copy into there
is nothing to skip anymore so simply set skip to 0.

Sponsored by: The FreeBSD Foundation
MFC after: 5 days

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 39770
Build 36659: arc lint + arc unit