RTEMS | posix aio functions can use (aio_request_type *)->suspendcbp unitialized (#5421)

Allan Hessenflow (@allanhessenflow) gitlab at rtems.org
Wed Jan 14 00:53:46 UTC 2026



Allan Hessenflow created an issue: https://gitlab.rtems.org/rtems/rtos/rtems/-/issues/5421



## Summary

When an aio_request_type is allocated, suspendcbp is left unitialized and is also not initialized when it is enqueued.  This can result in that unitialized pointer being dereferenced later in rtems_aio_handle().

## Steps to reproduce

Run the psxaio tests from testsuites/psxtests.  This sometimes results in a fault such as an unaligned access or bus error.

-- 
View it on GitLab: https://gitlab.rtems.org/rtems/rtos/rtems/-/issues/5421
You're receiving this email because of your account on gitlab.rtems.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rtems.org/pipermail/bugs/attachments/20260114/a5466802/attachment.htm>


More information about the bugs mailing list