⬢ DragonFlyBSD Kernel Audit
DF-2308 / master2308.log
← back to finding ↓ download raw
Hmm...  Looks like a unified diff to me...
The text leading up to this was:
--------------------------
|--- a/sys/bus/iicbus/iicbus.c	2026-06-29 12:51:18.000000000 +0000
|+++ b/sys/bus/iicbus/iicbus.c	2026-10-07 15:58:54.263534670 +0000
--------------------------
Patching file sys/bus/iicbus/iicbus.c using Plan A...
Hunk #1 succeeded at 55.
Hunk #2 succeeded at 68.
Hunk #3 succeeded at 195.
done
Hmm...  Looks like a unified diff to me...
The text leading up to this was:
--------------------------
|--- a/sys/bus/iicbus/iic.c	2026-06-29 12:51:18.000000000 +0000
|+++ b/sys/bus/iicbus/iic.c	2026-10-07 16:11:18.362126024 +0000
--------------------------
Patching file sys/bus/iicbus/iic.c using Plan A...
Hunk #1 succeeded at 125.
done
setup fixes verified in built modules
crw-------  1 root  wheel   32, 0x00000000 Oct 15 22:57 /dev/iic0
512
DF-2308 I2CREAD exerciser on /dev/iic0
claim: copyout of s->count bytes after a short-but-successful iicbus_read()
       discloses the uninitialized kmalloc tail

E  E1 no-start I2CREAD                rc=-1 errno=22 (expect 22) untouched=YES
E2 I2CSTART(NACK 0x6e)          rc=0 errno=0 (expect -1/2 IIC_ENOACK)
E  E2 after-NACK I2CREAD              rc=-1 errno=22 (expect 22) untouched=YES
E3 I2CSTART(write-dir 0x50)     rc=-1 (expect 0)
E  E3 wrong-direction I2CREAD         rc=-1 errno=22 (expect 22) untouched=YES

S  size=64     groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=256    groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=512    groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=1024   groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=2048   groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=64     groom=0 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=256    groom=0 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=512    groom=0 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=1024   groom=0 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=2048   groom=0 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=16384  groom=0 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=64     groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=256    groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=512    groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=1024   groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=2048   groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
DF-2308 I2CREAD exerciser on /dev/iic0
claim: copyout of s->count bytes after a short-but-successful iicbus_read()
       discloses the uninitialized kmalloc tail

E  E1 no-start I2CREAD                rc=-1 errno=22 (expect 22) untouched=YES
E2 I2CSTART(NACK 0x6e)          rc=0 errno=0 (expect -1/2 IIC_ENOACK)
E  E2 after-NACK I2CREAD              rc=-1 errno=22 (expect 22) untouched=YES
E3 I2CSTART(write-dir 0x50)     rc=-1 (expect 0)
E  E3 wrong-direction I2CREAD         rc=-1 errno=22 (expect 22) untouched=YES

S  size=64     groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=256    groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=512    groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=1024   groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=2048   groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=64     groom=0 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=256    groom=0 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=512    groom=0 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=1024   groom=0 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=2048   groom=0 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=16384  groom=0 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=64     groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=256    groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=512    groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=1024   groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=2048   groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
DF-2308 I2CREAD exerciser on /dev/iic0
claim: copyout of s->count bytes after a short-but-successful iicbus_read()
       discloses the uninitialized kmalloc tail

E  E1 no-start I2CREAD                rc=-1 errno=22 (expect 22) untouched=YES
E2 I2CSTART(NACK 0x6e)          rc=0 errno=0 (expect -1/2 IIC_ENOACK)
E  E2 after-NACK I2CREAD              rc=-1 errno=22 (expect 22) untouched=YES
E3 I2CSTART(write-dir 0x50)     rc=-1 (expect 0)
E  E3 wrong-direction I2CREAD         rc=-1 errno=22 (expect 22) untouched=YES

S  size=64     groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=256    groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=512    groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=1024   groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=2048   groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=64     groom=0 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=256    groom=0 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=512    groom=0 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=1024   groom=0 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=2048   groom=0 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=16384  groom=0 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=64     groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=256    groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=512    groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=1024   groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)
S  size=2048   groom=1 rc=0 errno=0 pattern_bad=0 marker=no kptr-qwords=0  (all bytes = slave TX pattern)