From 02267de8df7aa717c373063dd4dc81c0c0d3a1d2 Mon Sep 17 00:00:00 2001 From: Zach Dworkin Date: Mon, 10 Nov 2025 11:41:10 -0800 Subject: [PATCH] man/fi_av: Define out of range lookup behavior Attempting fi_av_lookup with a fi_addr larger than the max entry number of the AV will result in undefined behavior. It is expected by an application to not request lookup of an out of bounds fi_addr. Signed-off-by: Zach Dworkin --- man/fi_av.3.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/man/fi_av.3.md b/man/fi_av.3.md index 54054582fa4..4888b904243 100644 --- a/man/fi_av.3.md +++ b/man/fi_av.3.md @@ -514,9 +514,10 @@ set when removing an authorization key fi_addr_t. This call returns the address stored in the address vector that corresponds to the given fi_addr. The returned address is the same -format as those stored by the AV. On input, the addrlen parameter -should indicate the size of the addr buffer. If the actual address is -larger than what can fit into the buffer, it will be truncated. On +format as those stored by the AV. Requesting lookup of a fi_addr that is +outside the range of the AV will result in undefined behavior. On input, the +addrlen parameter should indicate the size of the addr buffer. If the actual +address is larger than what can fit into the buffer, it will be truncated. On output, addrlen is set to the size of the buffer needed to store the address, which may be larger than the input value.