Files
Osvaldo Janeri Filho d5d386df28 bhyve: fix integer overflow in qXfer packet parser
doff + dlen overflows unsigned int when both values are close to UINT_MAX,
causing the wrong branch to execute and passing an unbounded length to
append_binary_data().  Rewrite the comparison to avoid the addition.

Reviewed by:	markj
Fixes:		f81cdf24ba ("bhyve: Add support for XML register definitions")
MFC after:	1 week
Differential Revision:	https://reviews.freebsd.org/D60847

(cherry picked from commit 5ce0ab7355)
2026-10-26 14:35:02 +00:00
..
2026-08-06 18:26:27 -04:00
2025-12-18 17:51:14 -05:00
2025-02-26 20:14:37 -05:00
2026-05-10 00:58:35 +00:00
2026-05-26 10:53:20 +02:00
2023-08-17 15:08:30 +02:00
2025-10-16 14:08:40 +07:00
2024-11-25 16:33:46 -05:00
2025-12-18 17:49:14 -05:00
2026-02-05 19:39:08 -05:00
2025-10-16 14:08:40 +07:00
2024-11-04 12:16:22 -04:00
2026-09-07 12:11:38 -07:00
2026-09-03 11:56:44 +00:00
2025-02-19 21:34:42 -05:00
2026-05-28 08:27:12 +00:00
2024-12-27 10:40:05 -05:00
2024-01-31 09:16:23 -05:00
2024-08-01 10:55:29 -04:00
2026-02-15 20:03:29 -05:00
2025-10-16 14:08:40 +07:00
2023-08-16 11:55:03 -06:00
2024-11-12 08:40:05 -05:00
2026-09-03 11:56:44 +00:00
2026-02-21 13:50:37 +03:00
2025-11-19 11:19:07 +00:00
2025-07-19 02:03:53 +01:00
2025-07-19 02:03:53 +01:00
2024-05-14 08:58:40 +02:00
2025-10-16 14:08:40 +07:00
2025-05-22 20:24:28 +02:00
2026-05-28 10:02:52 +02:00
2026-04-08 16:10:23 -03:00
2024-08-10 12:21:51 +02:00
2026-02-23 14:09:24 +07:00
2026-02-05 19:38:20 -05:00
2026-10-13 12:20:07 -07:00
2023-08-16 11:55:03 -06:00
2025-05-12 16:08:34 +02:00