[Bug 295106] nl_get_attrs_bmask_raw() can read off the end of its input buffer

From: <bugzilla-noreply_at_freebsd.org>
Date: Sun, 10 May 2026 02:53:08 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295106

Gleb Smirnoff <glebius@FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |glebius@FreeBSD.org
           Assignee|bugs@FreeBSD.org            |glebius@FreeBSD.org
             Status|New                         |In Progress

--- Comment #1 from Gleb Smirnoff <glebius@FreeBSD.org> ---
Thanks for submission! Wasn't able to reproduce a crash, but indeed there is
unsigned underflow here.

-- 
You are receiving this mail because:
You are the assignee for the bug.