[Bug 291063] bhyve: Failed to emulate instruction sequence 8908f0091c244883c2044883c00441

From: <bugzilla-noreply_at_freebsd.org>
Date: Sat, 24 Oct 2026 01:18:53 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291063

--- Comment #10 from commit-hook@FreeBSD.org ---
A commit in branch stable/14 references this bug:

URL:
https://cgit.FreeBSD.org/src/commit/?id=cdc894780c5014acf8278fa1f7ba02040096ce26

commit cdc894780c5014acf8278fa1f7ba02040096ce26
Author:     Quentin Thébault <quentin.thebault@defenso.fr>
AuthorDate: 2026-08-07 14:02:08 +0000
Commit:     Kyle Evans <kevans@FreeBSD.org>
CommitDate: 2026-10-23 02:52:52 +0000

    bhyve: tpm: allow the last dword of the CRB command buffer

    The bounds check rejected any access ending exactly at the end of the
    register block, so a four byte write at offset 0xffc was refused,
    returning EINVAL and killing the VM.

    PR:             291063
    Fixes:          75909086a45d ("bhyve: allow read/write to full CRB buffer")
    Sponsored by:   Defenso

    Signed-off-by: Quentin Thébault <quentin.thebault@defenso.fr>
    Reviewed-by: aokblast, kevans, markj
    (cherry picked from commit 4505445ccdb9555efc23262a971a18ca03486969)

 usr.sbin/bhyve/tpm_intf_crb.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

-- 
You are receiving this mail because:
You are on the CC list for the bug.