DragonFlyBSD Kernel Audit
DF-1306 / run.log
← back to finding ↓ download raw
BUILD_EXIT=0
-rwxr-xr-x  1 maxx  maxx  9280 Jul 20 09:09 harness
DF-1306 kv_parse_power_table nonClockInfoIndex OOB read harness
sizeof(ATOM_PPLIB_NONCLOCK_INFO)=28  sizeof(NonClockInfoArray)=32
NonClockInfoArray @ 0x80047cfe0 (nonClockInfo[0] @ 0x80047cfe4), ucNumEntries=1
VBIOS nonClockInfoIndex = 255  (NO check vs ucNumEntries=1)
access byte offset = 255 * 28 = 7140  (past the single valid entry)
FAULT (signal 11): OOB read at nonClockInfo[255] off the bios buffer
  -> in-kernel equivalent: heap OOB read up to 7140 bytes past nonClockInfo[0]
RESULT: OOB read CONFIRMED at kv_dpm.c:2670 (nonClockInfoIndex used with NO bounds check vs ucNumEntries)
RUN_EXIT=0
RUN_EXIT=0