[Bug 218911] [uma] Memory corruption with certain item sizes
bugzilla-noreply at freebsd.org
bugzilla-noreply at freebsd.org
Sun Apr 30 16:19:31 UTC 2017
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=218911
--- Comment #3 from Mark Johnston <markj at FreeBSD.org> ---
This looks reasonable to me too.
I note that the assignment keg->uk_slabsize = keg->uk_ppera * PAGE_SIZE will
overflow when uk_ppera >= 16. This field isn't actually used after the keg is
constructed, so a different solution may be to remove uk_slabsize and make
uk_pgoff 32 bits wide.
--
You are receiving this mail because:
You are the assignee for the bug.
More information about the freebsd-bugs
mailing list