From nobody Tue Oct 06 16:40:03 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4hzhnN6k1dz4n9lb for ; Tue, 06 Oct 2026 16:40:08 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "YR2" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4hzhnN5v82z4q9k for ; Tue, 06 Oct 2026 16:40:08 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1791304808; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=3tEoxgkXI44Z3MQWJ6aHBj+qNRh+XjnNXzx9EY5cu0Q=; b=REzDIJCBKkJEOdAoKV9FTq7OyW3WDzLwdqhhuxyUEDykwv8iJlGeYSBOIfz+1sbUj8BSbn aesIeYpM4zkHNxI2Fxuvgd+1vdIpDENUArr9QLx7Bi8wpQW8/tGZTLB5HfmXGSwTk37jA3 fNWK2IBP4BKiP5zyg36LKd77TiNDvLZAKIjCFF9EVWmZqt/XjFsaug1XP2aje3/qcWwT8V qtbEWMnURcuUEXdPfwdO+3dXtGvkFx1M0HpmH5iVDsI+nAl4QjVrX2vrUBX/106AAA5jnj LubAbsTYlkTKqqcFnLhb4GYBl5I6b1douQMcz/tl9+4sw6DmJcwiWv3MftT+BQ== ARC-Seal: i=1; a=rsa-sha256; d=freebsd.org; s=dkim; cv=none; t=1791304808; b=pid4rNpw6XRIogJJI3d5MUokIeumblNVSPovmVjwF0BvUNZL/E97GAJyP9FAdPMdGRWEtK obGgcOYoDTYxsIbcAGHieyIMxPxuoki3Oe5k3fHJsZOysWL2CoXR0NRStlwSHAXhMH8Rcf 8LGjhuMR5iTbFHvNLv8rBdy0rCVJVTSCnPNOqw9BivsbyDhjJe0GYFnf2hSCv5b5Xox8vD csfua5dSuay0Jj118JA93Zd5a0j2rkNpBWUAk8akT1DyQTJZu3+M9jQDAgIm1l4XfgfFUG PKEfaN5bav9A+rnEupBz3pfJsPfVIGhfNN7tYm+cu0b3WJqLtr5IEjg9NLxf9w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1791304808; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=3tEoxgkXI44Z3MQWJ6aHBj+qNRh+XjnNXzx9EY5cu0Q=; b=dcafN9lxUvmQdY6WL1T3IgT++HPqO+2Jfy+8YFsl49lbCeydxfutdcQca7UNnnpxgPVgWZ FTaYVMsAXVgia/0X0oh62f8Von5+18n1NC8mWLsjNHPOFeMLUpSsHiXTOe5ajSLIS2jPC2 Dvs/M3I6brghj7p6QWL3SU/1n4cydE6itDllxsK85ohQV1HObleb5SQ7/TozdoEwD2MPZj cxBuMdnicEniE9oHUYNlPVZH2eiuRRTsimeCQkcPtxS16YcFQQJWByCYDIr0yLfgYiEDO7 MvwZC7LUaELiq2XxPRBzknPjmco7rldsQYiQh6Zai1VoaFBzYQvEgiIjteFwPw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4hzhnN4yCnz1Cj3 for ; Tue, 06 Oct 2026 16:40:08 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 30c2f by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Tue, 06 Oct 2026 16:40:03 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org From: Roman Bogorodskiy Subject: git: b3b90afc9db7 - stable/14 - bhyveload: validate character disk devices List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: novel X-Git-Repository: src X-Git-Refname: refs/heads/stable/14 X-Git-Reftype: branch X-Git-Commit: b3b90afc9db7e2d2ed8a1c58a1063b5d4901e01d Auto-Submitted: auto-generated Date: Tue, 06 Oct 2026 16:40:03 +0000 Message-Id: <6ac52463.30c2f.4ea78871@gitrepo.freebsd.org> The branch stable/14 has been updated by novel: URL: https://cgit.FreeBSD.org/src/commit/?id=b3b90afc9db7e2d2ed8a1c58a1063b5d4901e01d commit b3b90afc9db7e2d2ed8a1c58a1063b5d4901e01d Author: Roman Bogorodskiy AuthorDate: 2026-08-28 17:51:31 +0000 Commit: Roman Bogorodskiy CommitDate: 2026-10-06 16:39:39 +0000 bhyveload: validate character disk devices Currently, bhyveload(8) does not validate the supplied disk image path. For example, it allows passing the /dev/null device, which later fails in userboot because it does not support DIOCGSECTORSIZE and DIOCGMEDIASIZE ioctls (see userdisk_init() in stand/userboot/userboot/userboot_disk.c). Fix that by checking DIOCGSECTORSIZE and DIOCGMEDIASIZE ioctls early. A similar check already exists in bhyve(8). While here, make cb_diskioctl() report the obtained sector size instead of hard-coding 512. Reviewed by: markj MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D59253 (cherry picked from commit 51234535ddd6ec0afe9dd4e3f34a31b92d5cdd78) --- usr.sbin/bhyveload/bhyveload.c | 34 +++++++++++++++++++++++++++++++--- 1 file changed, 31 insertions(+), 3 deletions(-) diff --git a/usr.sbin/bhyveload/bhyveload.c b/usr.sbin/bhyveload/bhyveload.c index 3ee5f7ac7129..3f29d642461d 100644 --- a/usr.sbin/bhyveload/bhyveload.c +++ b/usr.sbin/bhyveload/bhyveload.c @@ -364,7 +364,14 @@ cb_diskioctl(void *arg __unused, int unit, u_long cmd, void *data) switch (cmd) { case DIOCGSECTORSIZE: - *(u_int *)data = 512; + if (fstat(disk_fd[unit], &sb) != 0) + return (ENOTTY); + if (S_ISCHR(sb.st_mode)) { + if (ioctl(disk_fd[unit], DIOCGSECTORSIZE, data) != 0) + return (ENOTTY); + } else { + *(u_int *)data = 512; + } break; case DIOCGMEDIASIZE: if (fstat(disk_fd[unit], &sb) != 0) @@ -718,7 +725,9 @@ altcons_open(char *path) static int disk_open(char *path) { - int fd; + struct stat sbuf; + off_t size; + int fd, ret, sectsz; if (ndisks >= NDISKS) return (ERANGE); @@ -726,11 +735,30 @@ disk_open(char *path) fd = open(path, O_RDWR); if (fd < 0) return (errno); + if (fstat(fd, &sbuf) < 0) { + ret = errno; + goto err; + } + + size = sbuf.st_size; + sectsz = DEV_BSIZE; + if (S_ISCHR(sbuf.st_mode)) { + if (ioctl(fd, DIOCGMEDIASIZE, &size) < 0 || + ioctl(fd, DIOCGSECTORSIZE, §sz) < 0) { + ret = errno; + goto err; + } + assert(size != 0); + assert(sectsz != 0); + } disk_fd[ndisks] = fd; ndisks++; return (0); +err: + close(fd); + return (ret); } static void @@ -814,7 +842,7 @@ main(int argc, char** argv) case 'd': error = disk_open(optarg); if (error != 0) - errx(EX_USAGE, "Could not open '%s'", optarg); + errc(EX_USAGE, error, "Could not open '%s'", optarg); break; case 'e':