From nobody Sat Feb 21 15:29:25 2026 X-Original-To: dev-commits-src-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4fJ9yf5B3wz6Snn6 for ; Sat, 21 Feb 2026 15:29:30 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R12" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4fJ9yf4SWPz3kHF for ; Sat, 21 Feb 2026 15:29:30 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1771687770; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=P4WEgs/3bhuVpHfLRfOBvfBg+qUyJuEUJJB5fhbtls4=; b=NfHsR+sXi9XcWQ+X23vHhLF5kGAyY9/vXRc88cmoadXw+oA9OkGI/1IYtPvgDoIrln6akO kBOzpl6HCDAHXN1rhiLVwl8tk9uCYhO/J/g6OtQh1iJNA0m2H/veciu1emD68C7Cm6h1gN LIM0MVU6QTHKRN5MGEnPhgZSbP3oOhG7l88GxXwgzk3GsgO26Bi0jhy82TuTHjgsiu6pfK eCZtofHDsRtEK6ciH85q/dBBR1QFF3MebJ5ClPv468lIHcrXHeZconnsMQXfzm5/A8zMrH ioAl9rN3FImyIW3dKKFVOeztXCofO/tKGJTmZh26peh8drx0Ms3CLxae8f7ajQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1771687770; a=rsa-sha256; cv=none; b=g6sg6FV2tzfXg9yIdkWZXj5iRgqW5hWuGNE2dAFD8FzjhmrnWrPLPalzuuQ/moX61pkUE8 YrOTa3k6zyBDQnLL4jX4eFZzJVeoPQ0mtHRPuj3JlxP030qZixqokOvNi1ZPdKkN8EOXSD FalZMlw4CzgN2Bk/72aLICfecV2hhpLM0EM29KdUjo8FVxIV5jJv74L/qtvmKyZ9GMQGMM aOxXyvoVfX5/nxQ4mjPvYmRJYMwkKAwrSWjKIL4AnPq48a0+4uwPKPwniJBGvoVcaWLbDB IVQs2ibI4SSpZnO8kTzcQVxb/pyFwG2Do1ohfqlGIFSvYGX9joDjwTKfNdX5jg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1771687770; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=P4WEgs/3bhuVpHfLRfOBvfBg+qUyJuEUJJB5fhbtls4=; b=NbfpKhIAnrGPN7g25UTLgMw1BdD+rka0Uz+tRlse/i3qh6Bahz3oYIskD+k4wzeLna/87W FDBzFBM6/wwNMGbDV6FzLmjhKsR2oq/Gql1mmRPERwBLe5i+gmdNM33gJoYUy6CpI+c3LN 7/xLhyi+fJkycq/tAPzC+JfvlZq06/RV6eeR2nn+FXSQGo6WnJBb+/owHNLHf6QKzlsJOo zq5YsSQRfDHI6cblfII31X7ZQkjy2SURShU2tc7pTsdiIW8ZrINZJc5a1JIkNw8Qr+8GqX 1wvvxAAvfa6vLgbT+V7LlxoT1GCq/NcYlY+7DNNaOUuYJ2HwduYoAlE+KgoXKQ== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4fJ9yf419sz1J0S for ; Sat, 21 Feb 2026 15:29:30 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 25502 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Sat, 21 Feb 2026 15:29:25 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org From: Toomas Soome Subject: git: 23605a8e5124 - main - loader.efi: efi_redirect_exceptions does use uninitialized pointer List-Id: Commit messages for the main branch of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-main@freebsd.org Sender: owner-dev-commits-src-main@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: tsoome X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 23605a8e5124dcbd27aa3a8bfbca20ee2b179361 Auto-Submitted: auto-generated Date: Sat, 21 Feb 2026 15:29:25 +0000 Message-Id: <6999cf55.25502.73c8df56@gitrepo.freebsd.org> The branch main has been updated by tsoome: URL: https://cgit.FreeBSD.org/src/commit/?id=23605a8e5124dcbd27aa3a8bfbca20ee2b179361 commit 23605a8e5124dcbd27aa3a8bfbca20ee2b179361 Author: Toomas Soome AuthorDate: 2026-02-21 15:27:35 +0000 Commit: Toomas Soome CommitDate: 2026-02-21 15:27:35 +0000 loader.efi: efi_redirect_exceptions does use uninitialized pointer loader_idt.rd_base is not set when we are attempting to bcopy(), resulting to data stored to page 0 and therefore corrupting it. Reviewed by: kib Differential Revision: https://reviews.freebsd.org/D55180 --- stand/efi/loader/arch/amd64/trap.c | 1 + 1 file changed, 1 insertion(+) diff --git a/stand/efi/loader/arch/amd64/trap.c b/stand/efi/loader/arch/amd64/trap.c index ffd84db40a3a..3fe86f7b1924 100644 --- a/stand/efi/loader/arch/amd64/trap.c +++ b/stand/efi/loader/arch/amd64/trap.c @@ -266,6 +266,7 @@ efi_redirect_exceptions(void) return (0); } loader_idt.rd_limit = fw_idt.rd_limit; + loader_idt.rd_base = lidt_pa; bcopy((void *)fw_idt.rd_base, (void *)loader_idt.rd_base, loader_idt.rd_limit); bzero(ist_use_table, sizeof(ist_use_table));