DragonFlyBSD Kernel Audit
DF-2074 / run.sh
← back to finding ↓ download raw
#!/bin/sh
# DF-2074 run.sh -- HW-gated; no runtime trigger possible on this guest.
# Confirming artifact: the source trace in VERDICT.md (cited path confirmed
# line-by-line) plus the combined-fix kernel build (fix_build_combined.log).
set -eu
cd "$(dirname "$0")/../../.."   # repo root
echo "DF-2074: HW-gated (no Mylex DAC960/acceleRAID adapter). Source-only confirmation."
echo "  Bug confirmed: sys/dev/raid/mlx/mlx_disk.c:161 reads uninit/stale bio_driver_info"
echo "  No I/O-path writer exists: push_bio (vfs_bio.c:768-788) skips bio_driver_info"
echo "  Correct source dev->si_drv1 set at mlx_disk.c:260, unused by strategy"
echo "  Reference pattern: amr_disk.c:172-179 (amrd_strategy)"
echo "  Runtime trigger requires Mylex adapter + operator/root /dev/mlxd* access."
echo "  Realistic impact ceiling: wild pointer deref -> local DoS panic."
./dfbsd-qemu/vm.sh run_root 'pciconf -l 2>/dev/null | grep -iE "mlx|mylex" || echo "NO_MLX_HW (HW-gated, source-only)"'