diff options
| author | Abdelkader Boudih <seuros@FreeBSD.org> | 2026-09-23 18:02:38 +0000 |
|---|---|---|
| committer | Abdelkader Boudih <seuros@FreeBSD.org> | 2026-09-23 18:02:38 +0000 |
| commit | 34f131f1de853ae824a6e67dd6429332d23b373d (patch) | |
| tree | cd9fbac2d8606324af893dd62ed6240b01806e86 /sys/dev/tsec/(developers-only) | |
| parent | ad57f212665e1642423afb83aef19e755833643f (diff) | |
The Get Log Page request for the error log is clamped to
NVME_MAX_AER_LOG_SIZE, but the byte-swap loop iterated ELPE + 1
entries. A controller reporting more than 63 entries makes the loop
overrun the 4 KiB log page buffer.
Reviewed by: ngie, imp, adrian
Differential Revision: https://reviews.freebsd.org/D59626
Diffstat (limited to 'sys/dev/tsec/(developers-only)')
0 files changed, 0 insertions, 0 deletions