⬢ DragonFlyBSD Kernel Audit
DF-2318 / postboot_run.log
← back to finding ↓ download raw 
rig2: verbatim pccard.c lifecycle rig (sizeof pf=216 cfe=160 ivar=16)
offsetof(pccard_softc, card.cis1_info[0]) = 0x110
=========================================================
SCENARIO no_vers1_devadded: DF-2318: no VERS_1, driver attaches -> devadded -> pnpinfo
=========================================================
-- pre-checks: verbatim pccard_read_cis on the no-VERS_1 image
PRE: card.error=0 pf_head_empty=0 cis1_info[0]=0x0 cis1_info[1]=0x0 manufacturer=0x1234 product=0x5678
-- entering verbatim pccard_attach_card (driver will attach)
    [devadded] pccardfunc0 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="" cisproduct="" function_type=-1"
attach returned (no fault)
RESULT no_vers1_devadded: exit 0
=========================================================
SCENARIO no_vers1_nomatch: DF-2318: no VERS_1, no driver -> devnomatch -> pnpinfo
=========================================================
-- entering verbatim pccard_attach_card (NO driver matches)
attach returned (no fault)
RESULT no_vers1_nomatch: exit 0
=========================================================
SCENARIO no_vers1_sysctl: DF-2318: no VERS_1, hw.bus.devices walk -> pnpinfo
=========================================================
-- entering verbatim pccard_attach_card (silent probe fail)
-- emulating `devinfo -v` / sysctl hw.bus.devices walk (subr_bus.c:3899)
    pnpinfo of pccardfunc0 ...
    -> "manufacturer=0x1234 product=0x5678 cisvendor="" cisproduct="" function_type=-1"
walk survived (no fault)
RESULT no_vers1_sysctl: exit 0
=========================================================
SCENARIO vers1_pnpinfo_ok: negative: VERS_1 present, pnpinfo builds
=========================================================
    [devadded] pccardfunc0 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
[vers1_pnpinfo_ok] current_list: pf=1 cfe=1 | ORPHANED: pf=0 cfe=0 (leak=0 bytes) | live-children(zombies)=1 | io-windows-held=1 ccr-held=1
RESULT vers1_pnpinfo_ok: exit 0
=========================================================
SCENARIO busypanic: DF-5355: partial alloc leaves busy rid -> re-add panics
=========================================================
-- entering verbatim pccard_attach_card -> pccard_function_init (cfe#0: anywhere+0x3F8; bridge window [0x110,0x2ff])
pccard0: Allocation failed for cfe 0
    [devadded] pccardfunc0 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
[busypanic] current_list: pf=1 cfe=2 | ORPHANED: pf=0 cfe=0 (leak=0 bytes) | live-children(zombies)=1 | io-windows-held=1 ccr-held=1
RESULT busypanic: exit 0
=========================================================
SCENARIO reentry_leak: DF-5356: CD-bounce re-attach orphans pf list, stacks children
=========================================================
-- cycle 0 (detailed):
    [devadded] pccardfunc0 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
[after attach #1] current_list: pf=1 cfe=1 | ORPHANED: pf=0 cfe=0 (leak=0 bytes) | live-children(zombies)=1 | io-windows-held=1 ccr-held=1
[after attach #2 (bounce)] current_list: pf=1 cfe=1 | ORPHANED: pf=0 cfe=0 (leak=0 bytes) | live-children(zombies)=1 | io-windows-held=1 ccr-held=1
[after detach (final removal)] current_list: pf=0 cfe=0 | ORPHANED: pf=0 cfe=0 (leak=0 bytes) | live-children(zombies)=0 | io-windows-held=0 ccr-held=0
-- 50 more (attach, bounce-attach, detach) cycles:
    [devadded] pccardfunc1 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
[cycle 1] current_list: pf=0 cfe=0 | ORPHANED: pf=0 cfe=0 (leak=0 bytes) | live-children(zombies)=0 | io-windows-held=0 ccr-held=0
    [devadded] pccardfunc2 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc3 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc4 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc5 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc6 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc7 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc8 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc9 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc10 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc11 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc12 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc13 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc14 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc15 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc16 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc17 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc18 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc19 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc20 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc21 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc22 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc23 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc24 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc25 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc26 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc27 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc28 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc29 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc30 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc31 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc32 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc33 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc34 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc35 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc36 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc37 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc38 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc39 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc40 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc41 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc42 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc43 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc44 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc45 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc46 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc47 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc48 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc49 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc50 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
[cycle last] current_list: pf=0 cfe=0 | ORPHANED: pf=0 cfe=0 (leak=0 bytes) | live-children(zombies)=0 | io-windows-held=0 ccr-held=0
TOTAL after 51 bounce cycles: orphaned-kmalloc-blocks=0 leak=0 bytes | zombie-children=0 | io-held=0 ccr-held=0
NOTE: leak grows linearly with bounce cycles (evil card CD glitch every ~2s) -> unbounded kernel memory exhaustion.
RESULT reentry_leak: exit 0
=========================================================
SCENARIO benign_cycle: negative: clean attach/detach cycles
=========================================================
    [devadded] pccardfunc0 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc1 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc2 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc3 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc4 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc5 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc6 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc7 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc8 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc9 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc10 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc11 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc12 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc13 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc14 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc15 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc16 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc17 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc18 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc19 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc20 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc21 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc22 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc23 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc24 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc25 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc26 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc27 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc28 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc29 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc30 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc31 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc32 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc33 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc34 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc35 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc36 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc37 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc38 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc39 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc40 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc41 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc42 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc43 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc44 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc45 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc46 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc47 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc48 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc49 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
    [devadded] pccardfunc50 pnpinfo="manufacturer=0x1234 product=0x5678 cisvendor="ACME" cisproduct="Widget" function_type=-1"
[benign_cycle x51] current_list: pf=0 cfe=0 | ORPHANED: pf=0 cfe=0 (leak=0 bytes) | live-children(zombies)=0 | io-windows-held=0 ccr-held=0
RESULT benign_cycle: exit 0