loader.efi: efi_redirect_exceptions does use uninitialized pointer

loader_idt.rd_base is not set when we are attempting to bcopy(),
resulting to data stored to page 0 and therefore corrupting it.

Reviewed by:	kib
Differential Revision:	https://reviews.freebsd.org/D55180

This commit is contained in:

Toomas Soome

2026-02-21 17:27:35 +02:00

parent f2186bbd63

commit 23605a8e51

1 changed files with 1 additions and 0 deletions

									
										stand/efi/loader/arch/amd64/trap.c
									
		+1
		
												View File
												
				@@ -266,6 +266,7 @@ efi_redirect_exceptions(void)

						return (0);

					}

					loader_idt.rd_limit = fw_idt.rd_limit;

					loader_idt.rd_base = lidt_pa;

					bcopy((void *)fw_idt.rd_base, (void *)loader_idt.rd_base,

					    loader_idt.rd_limit);

					bzero(ist_use_table, sizeof(ist_use_table));