Files
freebsd/usr.sbin
Osvaldo Janeri Filho 5ce0ab7355 bhyve: fix integer overflow in qXfer packet parser
doff + dlen overflows unsigned int when both values are close to UINT_MAX,
causing the wrong branch to execute and passing an unbounded length to
append_binary_data().  Rewrite the comparison to avoid the addition.

Reviewed by:	markj
Fixes:		f81cdf24ba ("bhyve: Add support for XML register definitions")
MFC after:	1 week
Differential Revision:	https://reviews.freebsd.org/D60847
2026-10-19 18:53:53 +00:00
..
…
2026-09-30 12:20:02 -04:00
2026-09-30 12:21:45 -04:00
2026-06-18 12:12:46 -08:00
2026-05-03 05:31:51 +00:00
2026-05-03 05:31:51 +00:00
2026-06-22 17:06:14 -06:00
2024-11-03 15:18:39 -05:00
2025-11-12 12:09:09 -05:00
2026-05-12 20:05:19 +00:00
2024-10-14 10:26:17 -07:00
2026-08-31 12:13:52 -07:00
2024-11-04 11:26:14 -04:00
2026-09-01 14:49:24 +02:00
2024-09-21 05:25:15 -06:00
2026-09-06 15:34:34 -07:00
2026-02-24 15:29:01 +01:00
…
2026-05-03 13:53:25 -04:00
2024-10-14 10:26:17 -07:00
2024-10-14 10:26:17 -07:00
2024-10-14 10:26:17 -07:00
2026-09-16 12:13:25 +00:00
2026-09-01 14:49:24 +02:00
2026-09-07 18:44:46 -04:00
…
2025-11-14 15:29:05 +01:00
…
2025-05-05 16:39:25 +01:00
2025-08-07 03:23:19 +02:00
2026-03-06 16:05:09 +03:30
2025-11-18 16:24:20 +00:00
2026-05-27 17:27:11 +02:00
2026-05-29 09:58:50 -07:00
2026-03-15 23:22:18 -03:00
2025-12-09 21:57:10 +07:00
2025-08-06 11:18:59 -04:00
2025-03-29 17:48:06 -03:00
2026-08-14 23:09:08 +08:00
2025-11-08 08:04:33 +00:00
2024-10-14 10:26:17 -07:00
…
…
…
2025-08-22 16:13:15 -04:00
…
2026-05-27 00:05:45 +01:00
2026-09-30 12:20:02 -04:00
2026-09-30 12:20:02 -04:00
2026-01-09 11:28:43 -05:00