DragonFlyBSD Kernel Audit
DF-1167 / run.log
← back to finding ↓ download raw
[case 1] std_voltage_table=NULL, sclk_count=3 -> reproducing kernel loop (smu7_hwmgr.c:716-721)...
  BUG: dereferenced std_voltage_table (NULL) at i=0
  harness: caught signal 11 (SIGSEGV/SIGBUS) -- kernel equivalent: NULL-deref panic in smu7_setup_dpm_tables_v0

[case 2] std_voltage_table->count=1, sclk_count=8 -> OOB read past std_voltage_table->entries[]
  i=1: BUG OOB read std_voltage_table->entries[1].Leakage = 0x00000000 (past allocated count=1)
  i=2: BUG OOB read std_voltage_table->entries[2].Leakage = 0x00000000 (past allocated count=1)
  i=3: BUG OOB read std_voltage_table->entries[3].Leakage = 0x00000000 (past allocated count=1)
  i=4: BUG OOB read std_voltage_table->entries[4].Leakage = 0x00000000 (past allocated count=1)
  i=5: BUG OOB read std_voltage_table->entries[5].Leakage = 0x00000000 (past allocated count=1)
  i=6: BUG OOB read std_voltage_table->entries[6].Leakage = 0x00000000 (past allocated count=1)
  i=7: BUG OOB read std_voltage_table->entries[7].Leakage = 0x00000000 (past allocated count=1)

DF-1167 harness: both bug classes demonstrated.
EXIT=0