From 21bef3d2f03f19897c39c4c53c6945f986ea4a2f Mon Sep 17 00:00:00 2001 From: Mark Atwood Date: Thu, 9 Jul 2026 16:46:52 -0700 Subject: [PATCH] fix: bound nest counter in bsdkm vecreg save --- bsdkm/x86_vecreg.c | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/bsdkm/x86_vecreg.c b/bsdkm/x86_vecreg.c index a9226c50287..b677e5acbc9 100644 --- a/bsdkm/x86_vecreg.c +++ b/bsdkm/x86_vecreg.c @@ -165,6 +165,10 @@ int wolfkmod_vecreg_save(int flags_unused) td_tid, curthread->td_tid); return (EINVAL); } + if (fpu_states[PCPU_GET(cpuid)].nest == UINT_MAX) { + printf("error: wolfkmod_vecreg_save: nest overflow\n"); + return (EINVAL); + } fpu_states[PCPU_GET(cpuid)].nest++; } else { @@ -184,6 +188,10 @@ int wolfkmod_vecreg_save(int flags_unused) } /* increment nest and save td_tid. */ + if (fpu_states[PCPU_GET(cpuid)].nest == UINT_MAX) { + printf("error: wolfkmod_vecreg_save: nest overflow\n"); + return (EINVAL); + } fpu_states[PCPU_GET(cpuid)].nest++; fpu_states[PCPU_GET(cpuid)].td_tid = curthread->td_tid; }