[Bug 291063] bhyve: Failed to emulate instruction sequence 8908f0091c244883c2044883c00441

From: <bugzilla-noreply_at_freebsd.org>
Date: Sun, 11 Oct 2026 01:19:25 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291063

--- Comment #9 from commit-hook@FreeBSD.org ---
A commit in branch stable/15 references this bug:

URL:
https://cgit.FreeBSD.org/src/commit/?id=5329e07a6f50bff44c5c034d5aeee13187c9b242

commit 5329e07a6f50bff44c5c034d5aeee13187c9b242
Author:     Quentin Thébault <quentin.thebault@defenso.fr>
AuthorDate: 2026-08-07 14:02:08 +0000
Commit:     Kevin Bowling <kbowling@FreeBSD.org>
CommitDate: 2026-10-11 01:19:00 +0000

    bhyve: tpm: allow the last dword of the CRB command buffer

    The bounds check rejected any access ending exactly at the end of the
    register block, so a four byte write at offset 0xffc was refused,
    returning EINVAL and killing the VM.

    PR:             291063
    Fixes:          75909086a45d ("bhyve: allow read/write to full CRB buffer")
    Sponsored by:   Defenso

    Signed-off-by: Quentin Thébault <quentin.thebault@defenso.fr>
    Reviewed-by: aokblast, kevans, markj
    Pull-Request: https://github.com/freebsd/freebsd-src/pull/2362
    (cherry picked from commit 4505445ccdb9555efc23262a971a18ca03486969)

 usr.sbin/bhyve/tpm_intf_crb.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

-- 
You are receiving this mail because:
You are on the CC list for the bug.