Changeset 103066 in vbox for trunk/src/VBox/Runtime/r0drv

Timestamp:

Jan 25, 2024 3:03:18 PM (14 months ago)

Author:

vboxsync

svn:sync-xref-src-repo-rev:

161312

Message:

iprt: Prevent array-index-out-of-bounds UBSAN warnings on Linux, bugref:10585.

File:

• trunk/src/VBox/Runtime/r0drv/linux/memobj-r0drv-linux.c (modified) (3 diffs)

trunk/src/VBox/Runtime/r0drv/linux/memobj-r0drv-linux.c

@@ -426 +426 @@
             fContiguous = true;
             for (iPage = 0; iPage < cPages; iPage++)
-                pMemLnx->apPages[iPage] = &paPages[iPage];
+                *(pMemLnx->apPages + iPage) = &paPages[iPage];
         }
         else if (fContiguous)
@@ -442 +442 @@
         for (iPage = 0; iPage < cPages; iPage++)
         {
-            pMemLnx->apPages[iPage] = alloc_page(fFlagsLnx | __GFP_NOWARN);
-            if (RT_UNLIKELY(!pMemLnx->apPages[iPage]))
+            *(pMemLnx->apPages + iPage) = alloc_page(fFlagsLnx | __GFP_NOWARN);
+            if (RT_UNLIKELY(!*(pMemLnx->apPages + iPage)))
             {
                 while (iPage-- > 0)
-                    __free_page(pMemLnx->apPages[iPage]);
+                    __free_page(*(pMemLnx->apPages + iPage));
                 rtR0MemObjDelete(&pMemLnx->Core);
                 return rcNoMem;
@@ -623 +623 @@
         size_t iPage = pMemLnx->cPages;
         while (iPage-- > 0)
-            if (PageHighMem(pMemLnx->apPages[iPage]))
+            if (PageHighMem(*(pMemLnx->apPages + iPage)))
             {
                 fMustMap = true;