DragonFlyBSD Kernel Audit
DF-1250 / run.log
← back to finding ↓ download raw
RUN_START
bios allocation = 512 bytes
edid_info = 0x40, raw = bios+64
raw[0x7e] = 0xff
computed size (radeon_combios.c:374) = 32768 bytes
memcpy reads raw[0 .. 32768) = bios[64 .. 32832)
over-read past BIOS allocation: 32320 bytes of adjacent kernel heap

PRIMITIVE CONFIRMED: memcpy(edid, raw, 32768) reads 32320 bytes past a 512-byte BIOS slab.
drm_edid_is_valid is checked only AFTER (radeon_combios.c:381) -> leak is unconditional. Bug is REAL.
EXIT=0