DragonFlyBSD Kernel Audit
DF-1091 / verify.log
← back to finding ↓ download raw
PASS  amdsmb_bread reads SMB_BCNT into len, no clamp before loop
PASS  amdsmb_bread loop bound is slave len
PASS  SMB_DATA + i with i up to 255 reads past 32-byte register file
PASS  amdsmb_bread writes *count = len (unclamped)
PASS  SMB_DATA == 0x04, 32 registers (control case)
PASS  amdsmb_bwrite validates count <= 32 (control case)
PASS  smb.c SMB_BREAD passes uninitialized bcount then copyout up to bcount
control: ichsmb fix may or may not be present
PASS  ichsmb_bread clamps block_count in ISR (cross-driver control)
PASS  amdsmb is built into GENERIC (smbus module)

PASS=9 FAIL=0