⬢ DragonFlyBSD Kernel Audit
DF-2422 / manifest.json
← back to finding ↓ download raw
{
 "finding_id": "DF-2422",
 "verdict": "reproduced",
 "impact": "panic",
 "reproduce": {
  "build": "cc -O -o pass2422 pass2422.c -lcam",
  "run": "./pass2422 -c   (control: completes) ; ./pass2422  (trigger: panic)",
  "expected": "ahci_xpt_scsi_disk_io never consults csio->cdb_len: a pass(4) XPT_SCSI_IO CCB with CAM_CDB_POINTER and cdb_len=6 whose CDB buffer ends at a page boundary (next page PROT_NONE) made the kernel read cdb"
 },
 "kernel_refs": [
  "sys/dev/disk/ahci/ahci_cam.c:1089",
  "sys/dev/disk/ahci/ahci_cam.c:1512"
 ],
 "artifacts": [
  "README.md",
  "VERDICT.md",
  "build.sh",
  "env.txt",
  "fix.diff",
  "manifest.json",
  "panic.txt",
  "pass2422.c",
  "run.log",
  "run.sh",
  "verdict.json"
 ]
}