CVS: cvs.openbsd.org: src

CVSROOT:	/cvs
Module name:	src
Changes by:	[email protected]	2026/08/12 08:49:25

Modified files:
	sys/uvm        : uvm_amap.c 

Log message:
uvm: avoid reading am_hashshift out of a small amap

UVM_AMAP_BUCKET() violates memory correctness if UVM_AMAP_SMALL().
It reads am_hashshift in the union's ami_normal arm at offset 80,
past the end of an 80-byte amappl1 item.

Found by KASAN once free pool items were poisoned end to end.

ok kettenis@