DragonFlyBSD Kernel Audit
DF-1150 / run.log
← back to finding ↓ download raw
BUILD_EXIT=0
MAX_REGULAR_DPM_NUMBER = 8 (dpm_levels[] capacity per table)
crafted VBIOS count    = 255

sclk  loop (:3514): 255 iters, resulting count=255
mclk  loop (:3527): 255 iters, resulting count=255
vddc  loop (:3539): 255 iters (direct index i)
vddci loop (:3550): 255 iters (direct index i)
mvdd  loop (:3560): 255 iters (direct index i)

TOTAL writes that land at dpm_levels[8..] (OOB) across all 5 loops = 1235

DF-1150: CONFIRMED OOB heap write in ci_setup_default_dpm_tables (VBIOS count=255 > MAX_REGULAR_DPM_NUMBER=8)

WITH FIX (loop cond && i<MAX_REGULAR_DPM_NUMBER; count clamped): OOB writes remaining = 0 (expect 0)
DF-1150 FIX: VALIDATED - loop clamp i<MAX_REGULAR_DPM_NUMBER eliminates the OOB
RUN_EXIT=0