# DF-2391 VERDICT

**Status:** reproduced (reproduced)
**Impact:** leak
**Confidence:** certain
**Attempts:** 2

Unprivileged (uid 1001) reads of every optional acpi_sony sysctl node returned the stale kernel-stack int: brightness (getmethod GBRT present) returned the real 7 while all 8 nodes whose getmethods are absent returned -1 across 3 rounds - 4 bytes of uninitialized kernel stack per read, exactly as filed (val declared uninitialized at acpi_sony.c:183, acpi_GetInteger failure ignored at :185, sysctl_handle_int SYSCTL_OUTs it verbatim). Fixed kernel: missing getmethod -> sysctl read returns an error, no value disclosed.

## Kernel references
- `sys/dev/acpica/acpi_sony/acpi_sony.c:179`
- `sys/dev/acpica/acpi_sony/acpi_sony.c:183`
- `sys/dev/acpica/acpi_sony/acpi_sony.c:185`
- `sys/dev/acpica/acpi_sony/acpi_sony.c:187`

## Guest
DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #7: Sat Oct 24 00:08:04 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/ACHARNESS  x86_64

## Fix validation
See fix.diff and README.md for the baseline/fixed A/B outputs (run.log / fixed.log).

## Fix status (batch validation)
Applied with the 36 sibling fix.diffs of this batch in findings/poc/_batch41/all_fixes.patch; single in-guest `make -j6 nativekernel KERNCONF=X86_64_GENERIC` completed RC=0 with zero errors under -Werror (full log: findings/poc/_batch41/fix_build8.log). Behavior A/B intentionally skipped for this Info-tier item.