Merged
Conversation
Bad copypasta in 4d451ba, leading to random stuff being blasted all over stack, destroying the program. Sponsored-by: Klara, Inc. Sponsored-by: Wasabi Technology, Inc. Signed-off-by: Rob Norris <rob.norris@klarasystems.com>
kithrup
approved these changes
Nov 20, 2025
behlendorf
approved these changes
Nov 20, 2025
ikozhukhov
approved these changes
Nov 20, 2025
amotin
approved these changes
Nov 24, 2025
kithrup
pushed a commit
to KlaraSystems/zfs
that referenced
this pull request
Dec 17, 2025
Bad copypasta in 4d451ba, leading to random stuff being blasted all over stack, destroying the program. Sponsored-by: Klara, Inc. Sponsored-by: Wasabi Technology, Inc. Reviewed-by: Alexander Motin <alexander.motin@TrueNAS.com> Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov> Reviewed-by: Igor Kozhukhov <igor@dilos.org> Reviewed-by: Sean Eric Fagan <sean.fagan@klarasystems.com> Signed-off-by: Rob Norris <rob.norris@klarasystems.com> Closes openzfs#17957
lundman
pushed a commit
to openzfsonosx/openzfs-fork
that referenced
this pull request
Feb 5, 2026
Bad copypasta in 4d451ba, leading to random stuff being blasted all over stack, destroying the program. Sponsored-by: Klara, Inc. Sponsored-by: Wasabi Technology, Inc. Reviewed-by: Alexander Motin <alexander.motin@TrueNAS.com> Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov> Reviewed-by: Igor Kozhukhov <igor@dilos.org> Reviewed-by: Sean Eric Fagan <sean.fagan@klarasystems.com> Signed-off-by: Rob Norris <rob.norris@klarasystems.com> Closes openzfs#17957
lundman
pushed a commit
to openzfsonwindows/openzfs
that referenced
this pull request
Feb 23, 2026
Bad copypasta in 4d451ba, leading to random stuff being blasted all over stack, destroying the program. Sponsored-by: Klara, Inc. Sponsored-by: Wasabi Technology, Inc. Reviewed-by: Alexander Motin <alexander.motin@TrueNAS.com> Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov> Reviewed-by: Igor Kozhukhov <igor@dilos.org> Reviewed-by: Sean Eric Fagan <sean.fagan@klarasystems.com> Signed-off-by: Rob Norris <rob.norris@klarasystems.com> Closes openzfs#17957
lundman
pushed a commit
to openzfsonwindows/openzfs
that referenced
this pull request
Feb 23, 2026
Bad copypasta in 4d451ba, leading to random stuff being blasted all over stack, destroying the program. Sponsored-by: Klara, Inc. Sponsored-by: Wasabi Technology, Inc. Reviewed-by: Alexander Motin <alexander.motin@TrueNAS.com> Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov> Reviewed-by: Igor Kozhukhov <igor@dilos.org> Reviewed-by: Sean Eric Fagan <sean.fagan@klarasystems.com> Signed-off-by: Rob Norris <rob.norris@klarasystems.com> Closes openzfs#17957
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
[Sponsors: Klara, Inc., Wasabi Technology, Inc.]
Description
Bad copypasta in 4d451ba, leading to random stuff being blasted all over stack, destroying the program.
The
read()call inrandom_get_bytes_common()random call would end up returning -1 when it tried to write past the end of the stack (errno wasEFAULT, not that we were checking it). The assert on the return immediately showed the extent of the damage:How Has This Been Tested?
Fairly easily reproduced in a ztest run with
-X(raidz expansion test).Types of changes
Checklist:
Signed-off-by.