From nobody Sun Jun 14 04:52:41 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4gdLTj1hSGz6hPrG for ; Sun, 14 Jun 2026 04:52:41 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4gdLTj0z49z3ZvL for ; Sun, 14 Jun 2026 04:52:41 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1781412761; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=LER9T0RwOkVOYv7NfxPfK62i3Gn9KJv3N7MGlB9CzUo=; b=p7/W79lpTsnVMksKkhKtfWNgvlsd2teNhDmXxuOrMJg8RX+NAB2F4DgBRegZ+szfHwJNqw sPZwZFqGsnCd2SXUpsq8z72RcjDAnJLRxm+d/yRXgRL6luh1Yhmff4fI+PXr2WjACadjED lJG2U2UC2CDWCDHGv4hbuhFvroF73bL1xbzCLuJ8EzovVUyD++LK4GTL7tiFx6RdtI1dSZ VDZSib48EEQZFcQJYk5t2gZxAEUiGtbQogjGGD5HKrdLmc3nxHRerNIuNugxsFEFcKl9e7 Yom+242TNRe1ccZNCEOkUDp/XpS0uK0bTCELoMoAvpBflwe/3pCeK6PTg39hGQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1781412761; a=rsa-sha256; cv=none; b=EXlWdtsG5K7NlYBdtVuURXpBOP/uGTWEa+cZkbprJW4u3kVYfgfuDl1F56aIymeGs1SomQ 4gyBcJzkDMXzGmtvEz0JlzKeLT1F6xt1fLV1bQAk0vqm3e/RvWxEJijQiiqSm7/KvmMtoL zuyN5GIveVs+W1w0lboPPiF3NqHrJ2wEH64l7+jY98JWnEJEcLN6AnCk3KtagOgnXheG4/ d+RIO/+M+GAmNGEE5ljLpIuG9FEOhhK9M2qUxT71ip/QZ6hPIubetQ933KhvrL3obz+DFa WZf/W0NwlchB3wQg7N9sAbz7pSIfhgHAdxCtpPURoP7WZyqXC7BtkVaXWXoIwQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1781412761; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=LER9T0RwOkVOYv7NfxPfK62i3Gn9KJv3N7MGlB9CzUo=; b=ckZoBeVnYyRZkSUbJxt+Hjq1EOBaP4PkhwjV6c0xc7Rx0AXBixArSaFjE++1+hB0TAyNj8 0Ii8Tf1/pvQSWRsbUzzZv8WbtleYoB3MBCBVzINiI7h4GMmSr3tgPneqm00ii6oF93y7Yd cgM9IBX7VCflhqMLix3dySmGD4Y3ngwZfae7wQ4DWXeeMDrb/eqp1WwQ3Rb8wTRtjS+v4U qkxTcOh+42837a8KJgNjdl91bLpb+9WCZ4k8QV7GEydkm++TzRQD3g8FbNy3BkBBUimg1V KQ7xkUtf7GG6Qx4a2aP+Bo2/CSooOsKpXczLjPfRC4JpAXDPwu9dvW/cAihnuA== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4gdLTj0SZfzv32 for ; Sun, 14 Jun 2026 04:52:41 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 4190f by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Sun, 14 Jun 2026 04:52:41 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org From: Konstantin Belousov Subject: git: 59b0df3441a9 - main - linux_ntsync(9): check the file type before calling native ntsync(9) List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: kib X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 59b0df3441a9c71580445fed579d4432dce95115 Auto-Submitted: auto-generated Date: Sun, 14 Jun 2026 04:52:41 +0000 Message-Id: <6a2e3399.4190f.3c0fb3fe@gitrepo.freebsd.org> The branch main has been updated by kib: URL: https://cgit.FreeBSD.org/src/commit/?id=59b0df3441a9c71580445fed579d4432dce95115 commit 59b0df3441a9c71580445fed579d4432dce95115 Author: Konstantin Belousov AuthorDate: 2026-06-14 04:11:08 +0000 Commit: Konstantin Belousov CommitDate: 2026-06-14 04:11:08 +0000 linux_ntsync(9): check the file type before calling native ntsync(9) Reported by: Alex S Sponsored by: The FreeBSD Foundation MFC after: 3 days --- sys/dev/ntsync/linux_ntsync.c | 36 ++++++++++++++++++++++++++++++++++++ 1 file changed, 36 insertions(+) diff --git a/sys/dev/ntsync/linux_ntsync.c b/sys/dev/ntsync/linux_ntsync.c index 064e8c6aede9..3ba135275f44 100644 --- a/sys/dev/ntsync/linux_ntsync.c +++ b/sys/dev/ntsync/linux_ntsync.c @@ -231,6 +231,10 @@ linux_ntsync_ioctl(struct thread *td, struct linux_ioctl_args *args) } break; case LNTSYNC_IOC_SEM_RELEASE: + if (fp->f_type != DTYPE_NTSYNC) { + error = ENOTTY; + break; + } error = copyin(data, &val, sizeof(val)); if (error == 0) { error = ntsync_sem_release(td, fp, &val); @@ -239,6 +243,10 @@ linux_ntsync_ioctl(struct thread *td, struct linux_ioctl_args *args) } break; case LNTSYNC_IOC_SEM_READ: + if (fp->f_type != DTYPE_NTSYNC) { + error = ENOTTY; + break; + } error = ntsync_sem_read(td, fp, &sa); if (error == 0) { ntsync_sa_to_lsa(&lsa, &sa); @@ -246,6 +254,10 @@ linux_ntsync_ioctl(struct thread *td, struct linux_ioctl_args *args) } break; case LNTSYNC_IOC_MUTEX_UNLOCK: + if (fp->f_type != DTYPE_NTSYNC) { + error = ENOTTY; + break; + } error = copyin(data, &lma, sizeof(lma)); ntsync_lma_to_ma(&ma, &lma); if (error == 0) { @@ -257,11 +269,19 @@ linux_ntsync_ioctl(struct thread *td, struct linux_ioctl_args *args) } break; case LNTSYNC_IOC_MUTEX_KILL: + if (fp->f_type != DTYPE_NTSYNC) { + error = ENOTTY; + break; + } error = copyin(data, &val, sizeof(val)); if (error == 0) error = ntsync_mutex_kill(td, fp, val); break; case LNTSYNC_IOC_MUTEX_READ: + if (fp->f_type != DTYPE_NTSYNC) { + error = ENOTTY; + break; + } error = ntsync_mutex_read(td, fp, &ma, &doco); if (doco) { ntsync_ma_to_lma(&lma, &ma); @@ -271,21 +291,37 @@ linux_ntsync_ioctl(struct thread *td, struct linux_ioctl_args *args) } break; case LNTSYNC_IOC_EVENT_SET: + if (fp->f_type != DTYPE_NTSYNC) { + error = ENOTTY; + break; + } error = ntsync_event_set(td, fp, &val); if (error == 0) error = copyout(&val, data, sizeof(val)); break; case LNTSYNC_IOC_EVENT_RESET: + if (fp->f_type != DTYPE_NTSYNC) { + error = ENOTTY; + break; + } error = ntsync_event_reset(td, fp, &val); if (error == 0) error = copyout(&val, data, sizeof(val)); break; case LNTSYNC_IOC_EVENT_PULSE: + if (fp->f_type != DTYPE_NTSYNC) { + error = ENOTTY; + break; + } error = ntsync_event_pulse(td, fp, &val); if (error == 0) error = copyout(&val, data, sizeof(val)); break; case LNTSYNC_IOC_EVENT_READ: + if (fp->f_type != DTYPE_NTSYNC) { + error = ENOTTY; + break; + } error = ntsync_event_read(td, fp, &ea); if (error == 0) { ntsync_ea_to_lea(&lea, &ea);