CVSROOT: /cvs
Module name: src
Changes by: mlar...@cvs.openbsd.org 2019/12/04 01:28:29
Modified files:
sys/uvm : uvm_map.c
Log message:
Fix a bad offset calculation in uvm_share.
Syzkaller found a bug in uvm_share when using a vmd(8) mmap region with
an offset that ended up making an overlap with a previous vmm(4) uvm_map
range.
This diff reworks the range and offset calculation in uvm_share. Only
vmm(4) uses this, so there should be no visible effects outside vmm(4)
environments.
Syzkaller also went sorta crazy on this one, finding multiple reproducers
for the same bug with just slightly different parameters, thus the
multiple "Reported-by" lines below.
ok stefan@, anton@
Reported-by: syzbot+2c625ab1b8e964da6...@syzkaller.appspotmail.com
Reported-by: syzbot+13008298624127514...@syzkaller.appspotmail.com
Reported-by: syzbot+27cfad3394f34528c...@syzkaller.appspotmail.com
Reported-by: syzbot+3e700c5698177f91c...@syzkaller.appspotmail.com
