From nobody Fri Jul 4 13:30:08 2025 X-Original-To: virtualization@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bYZJ11Qdjz615Yk for ; Fri, 04 Jul 2025 13:30:09 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R10" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bYZJ0355sz3PtX for ; Fri, 04 Jul 2025 13:30:08 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1751635808; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=FfPLCbdW6RSW/L2OXmFDVlqJLRRWkRld8mkw4IzTVec=; b=nDegYRdwlATE2Ef7Ds7jh5VsZ6OIYPwVVCCSoE/kd+ERT/cO99towokyTDADwLceQwdyK4 E79uGJ9KeEV3BQdiHwz5v00J1eOneo0TePi3cEyfpKxckTRNa6ymmbZd9rdt3RgH/wNxxj 4G8E/vcfBBXNCQZIf0aHSxtaFgThEAM8A4MSTqWwl/Ng3nhSdIvrwNONawtde4YTqRiZX5 45LlZLdQJjv+uugjbDiDVbTWQr3vFemtf15sap+nWz1KVN0TzRm7riaFJFW9AUlxd6xzis teEoBmh+HMAKI3kIeQVlewQEKAc89DGV/VxAJBsBi2rocmW0XLWLqL3oF6dWxQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1751635808; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=FfPLCbdW6RSW/L2OXmFDVlqJLRRWkRld8mkw4IzTVec=; b=jfkbD+A5qjaoeF8tm4waghK1qTMlRBGq+xIZUz5oCx9Vkpr3LSx4w6KhNR5duwKpE8jJ7q wtiihK1ZHDOUy2yS1y6IEuYXKdNbJAVCnvwyuWB9jS+vaU7h/Cx23RIPtP8d+Xtm0iSQ3E rCmsa1f0G7LPqureMJ8WIi9ZZgDuNhQF4thkcM0p9eQ4EQDBENpjsQNiNhI7IILOQLAqv1 k7ggVx7MnVBp5og998QbS3xRM40PSEbOwyVXb5f3+zztTVCUL37p9qtgW7kj7aw9/QZpmT ef4893nPxYatNOarbgpURx2+bdxqVRZm6oiS4KZPcVu6zM0KCiZJNOTRshLEJA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1751635808; a=rsa-sha256; cv=none; b=M/RpntP2wOrsS7KtvOmWvjaMhByZ/Y+Et6ZgCgfpUWwM3vAMXN4/4l6Yf83xlvMfUN3U6W bp6nQ+uUhFc2LXF5JFs2bpJ7QyKcumlOq3xXPcJoQ45zsjC7owb3R//zOaYHrGQZuFABX+ 4FgCtG2As6gZR94M/gVp4LmXE+zbzgL5nGvP1WQlP4+CpBom9J6lwF3zvqQug8VsIATw3c KxUVWN1G58lkPA1p+ymbNuPdg80gUz1LzTGgcvtBeVbNI0o8BhXZGZE8U6zpKCISFKyar6 R2mVsO1O5uEy/E43AziQnLV4JcELaZwLGsvrxBm2gzoOnzoB13l/LL0/vO2akA== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bYZJ02hyCzsSG for ; Fri, 04 Jul 2025 13:30:08 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 564DU8rJ015644 for ; Fri, 4 Jul 2025 13:30:08 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from bugzilla@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 564DU8Pl015643 for virtualization@FreeBSD.org; Fri, 4 Jul 2025 13:30:08 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: bugzilla set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: virtualization@FreeBSD.org Subject: [Bug 280098] 9pfs panics on qemu+kvm Date: Fri, 04 Jul 2025 13:30:08 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 15.0-CURRENT X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: commit-hook@FreeBSD.org X-Bugzilla-Status: Closed X-Bugzilla-Resolution: FIXED X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: virtualization@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Discussion List-Archive: https://lists.freebsd.org/archives/freebsd-virtualization List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-virtualization@freebsd.org Sender: owner-freebsd-virtualization@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D280098 --- Comment #8 from commit-hook@FreeBSD.org --- A commit in branch stable/14 references this bug: URL: https://cgit.FreeBSD.org/src/commit/?id=3Df5cc62e54a7f8ae9b8bb1484e0ebb2235= 2c95d36 commit f5cc62e54a7f8ae9b8bb1484e0ebb22352c95d36 Author: Danilo Egea Gondolfo AuthorDate: 2024-07-06 16:51:51 +0000 Commit: Gleb Popov CommitDate: 2025-07-04 13:28:06 +0000 virtio_p9fs: fix panic on qemu/kvm When the module is loaded on a system running on qemu/kvm the "modern" virtio infrastructure is used and virtio_read_device_config() will end up calling vtpci_modern_read_dev_config(). This function cannot read values of arbitrary sizes and will panic if the p9fs mount tag size is not supported by it. Use virtio_read_device_config_array() instead. It was tested on both bhyve and qemu/kvm. PR: 280098 Co-authored-by: Mark Peek Reviewed by: imp Pull Request: https://github.com/freebsd/freebsd-src/pull/1320 (cherry picked from commit 814bf1fddd27aea69740f9e7426302354285cad4) sys/dev/virtio/p9fs/virtio_p9fs.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) --=20 You are receiving this mail because: You are the assignee for the bug.=