Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 16 May 2022 21:29:06 +0000
From:      bugzilla-noreply@freebsd.org
To:        fs@FreeBSD.org
Subject:   [Bug 263971] ffs: malicious superblock can cause buffer overflow during tasting: panic: vm_fault_lookup: fault on nofault entry, addr: 0xffffffc07cb67000
Message-ID:  <bug-263971-3630-eIBa95sJzd@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-263971-3630@https.bugs.freebsd.org/bugzilla/>
References:  <bug-263971-3630@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D263971

--- Comment #2 from Robert Morris <rtm@lcs.mit.edu> ---
Created attachment 233973
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D233973&action=
=3Dedit
disk image that causes size calculation in ffs_sbget() to wrap around

--=20
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-263971-3630-eIBa95sJzd>