From 42cde478e31ccfe1b6520dd6c54d4405e09bffc7 Mon Sep 17 00:00:00 2001 From: Ian Moffett Date: Tue, 3 Jun 2025 16:41:21 -0400 Subject: kernel: device: Harden cdev mmap() bounds checks Signed-off-by: Ian Moffett --- sys/vm/vm_map.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'sys/vm/vm_map.c') diff --git a/sys/vm/vm_map.c b/sys/vm/vm_map.c index 112f4b0..a3a6f39 100644 --- a/sys/vm/vm_map.c +++ b/sys/vm/vm_map.c @@ -216,7 +216,7 @@ mmap(void *addr, size_t len, int prot, int flags, int fildes, off_t off) } cdevp = map_obj->data; - if ((pa = cdevp->mmap(vp->dev, off, 0)) == 0) { + if ((pa = cdevp->mmap(vp->dev, len, off, 0)) == 0) { kprintf("mmap: dev mmap() gave 0\n"); return NULL; } -- cgit v1.2.3