From nobody Sat Feb 21 15:29:25 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4fJ9yY57zwz6Snhc for ; Sat, 21 Feb 2026 15:29:25 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R12" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4fJ9yY4CkZz3jn9 for ; Sat, 21 Feb 2026 15:29:25 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1771687765; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=P4WEgs/3bhuVpHfLRfOBvfBg+qUyJuEUJJB5fhbtls4=; b=bTY0T9yHaJqkqI/jM6IiOJGnrzwb6rCm1QEDQ7BcaqZ7IIjXiegUvQ/n1zeD9a775lob0t Z+JJ/x7KA8V2e5vJPhLlRVgJW59GSWj/iSALa+WmK2ufxAzfdNIPbKf8dEk+Ns9ad382hB l2hFx/5Lu+z7fAdhSLaSEznQfi7aFre7L5DF67Kchq+UBobXhr38LljU9e9blz5NQq9dwZ Gj8R4uR1w5Ya/7yY/A9yLlh+chj1HHUVRgOmIw+5Lckp39MsAC5gWvdrhEjr561bDIznW/ FkP5YSA+9eL5BVGvwt84keH7zwM6fD+jwa3+L830+uMZmUAnQZYP/rrb8bf0Dw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1771687765; a=rsa-sha256; cv=none; b=Z4qugcmtYb153RaGXxi2J43GSAxtyliUGYmtkqFNFxf/A4GsEV5s1RoFucfZ8ZHZS1r1N5 RsR1+bvzHAVaJ4wzKUbEnaSgAqcDU5PRBtar93cI20ESjm159ONpr4CjfmeZGRfCeZ/64X 7e542p037hDAQKPb18PJbsQwJ8D1X7gosDe7O4gLlc+ynX6XBtZymm/wkMFDkt/hHql9Sm ImP2FpfLlSEfN7B9YjlcOYE4NZXII2K3ATlI/oQR5KtUJSUeVH/pASdGLfrGbmlQOYuNQx d9o1t74Njm7VHdvN/YmhawAJcsaV71c41Wx9VZACnZv+a3kMDnRsKU6yXaVduw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1771687765; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=P4WEgs/3bhuVpHfLRfOBvfBg+qUyJuEUJJB5fhbtls4=; b=l617bAVrfrRUCSUu3CiTnujpuA5BgEqrmnV4Ot8DqXjJSK88AiQwdMkhpgMoE3SkEVbQHQ pWV81DxXFu6gVtu+y2Bp+X820IT+2/DdxyotXTTs5Cw1xdwbp2Af9XhA66Oi1+hE61LE7E uHc1mn814INSKR9BGYWVwqLhRwvY0EgB3w6O5oO7VleG28wtx5Ycd663NWU0HsfBtRUuZg Gm3QMkj3LAfeK4UHXxqFpY/1WLppBp2txfRIYA+QgZJ00uoqt6gP86VXeUpSKWmaNZvVy7 ORWd5KYqBt/O7X14JmoFOVrF3CtFX3yfk0b8YhT3gbCBUhXGBR/HESZF9lwFLg== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4fJ9yY3pXsz1J3C for ; Sat, 21 Feb 2026 15:29:25 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 25502 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Sat, 21 Feb 2026 15:29:25 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org From: Toomas Soome Subject: git: 23605a8e5124 - main - loader.efi: efi_redirect_exceptions does use uninitialized pointer List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: tsoome X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 23605a8e5124dcbd27aa3a8bfbca20ee2b179361 Auto-Submitted: auto-generated Date: Sat, 21 Feb 2026 15:29:25 +0000 Message-Id: <6999cf55.25502.73c8df56@gitrepo.freebsd.org> The branch main has been updated by tsoome: URL: https://cgit.FreeBSD.org/src/commit/?id=23605a8e5124dcbd27aa3a8bfbca20ee2b179361 commit 23605a8e5124dcbd27aa3a8bfbca20ee2b179361 Author: Toomas Soome AuthorDate: 2026-02-21 15:27:35 +0000 Commit: Toomas Soome CommitDate: 2026-02-21 15:27:35 +0000 loader.efi: efi_redirect_exceptions does use uninitialized pointer loader_idt.rd_base is not set when we are attempting to bcopy(), resulting to data stored to page 0 and therefore corrupting it. Reviewed by: kib Differential Revision: https://reviews.freebsd.org/D55180 --- stand/efi/loader/arch/amd64/trap.c | 1 + 1 file changed, 1 insertion(+) diff --git a/stand/efi/loader/arch/amd64/trap.c b/stand/efi/loader/arch/amd64/trap.c index ffd84db40a3a..3fe86f7b1924 100644 --- a/stand/efi/loader/arch/amd64/trap.c +++ b/stand/efi/loader/arch/amd64/trap.c @@ -266,6 +266,7 @@ efi_redirect_exceptions(void) return (0); } loader_idt.rd_limit = fw_idt.rd_limit; + loader_idt.rd_base = lidt_pa; bcopy((void *)fw_idt.rd_base, (void *)loader_idt.rd_base, loader_idt.rd_limit); bzero(ist_use_table, sizeof(ist_use_table));