CVSROOT: /cvs Module name: src Changes by: [email protected] 2026/08/12 08:49:25
Modified files:
sys/uvm : uvm_amap.c
Log message:
uvm: avoid reading am_hashshift out of a small amap
UVM_AMAP_BUCKET() violates memory correctness if UVM_AMAP_SMALL().
It reads am_hashshift in the union's ami_normal arm at offset 80,
past the end of an 80-byte amappl1 item.
Found by KASAN once free pool items were poisoned end to end.
ok kettenis@
