[Bug 291063] bhyve: Failed to emulate instruction sequence 8908f0091c244883c2044883c00441
Date: Sat, 24 Oct 2026 01:18:53 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291063
--- Comment #10 from commit-hook@FreeBSD.org ---
A commit in branch stable/14 references this bug:
URL:
https://cgit.FreeBSD.org/src/commit/?id=cdc894780c5014acf8278fa1f7ba02040096ce26
commit cdc894780c5014acf8278fa1f7ba02040096ce26
Author: Quentin Thébault <quentin.thebault@defenso.fr>
AuthorDate: 2026-08-07 14:02:08 +0000
Commit: Kyle Evans <kevans@FreeBSD.org>
CommitDate: 2026-10-23 02:52:52 +0000
bhyve: tpm: allow the last dword of the CRB command buffer
The bounds check rejected any access ending exactly at the end of the
register block, so a four byte write at offset 0xffc was refused,
returning EINVAL and killing the VM.
PR: 291063
Fixes: 75909086a45d ("bhyve: allow read/write to full CRB buffer")
Sponsored by: Defenso
Signed-off-by: Quentin Thébault <quentin.thebault@defenso.fr>
Reviewed-by: aokblast, kevans, markj
(cherry picked from commit 4505445ccdb9555efc23262a971a18ca03486969)
usr.sbin/bhyve/tpm_intf_crb.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
--
You are receiving this mail because:
You are on the CC list for the bug.