DF-2422 / manifest.json
{ "finding_id": "DF-2422", "verdict": "reproduced", "impact": "panic", "reproduce": { "build": "cc -O -o pass2422 pass2422.c -lcam", "run": "./pass2422 -c (control: completes) ; ./pass2422 (trigger: panic)", "expected": "ahci_xpt_scsi_disk_io never consults csio->cdb_len: a pass(4) XPT_SCSI_IO CCB with CAM_CDB_POINTER and cdb_len=6 whose CDB buffer ends at a page boundary (next page PROT_NONE) made the kernel read cdb" }, "kernel_refs": [ "sys/dev/disk/ahci/ahci_cam.c:1089", "sys/dev/disk/ahci/ahci_cam.c:1512" ], "artifacts": [ "README.md", "VERDICT.md", "build.sh", "env.txt", "fix.diff", "manifest.json", "panic.txt", "pass2422.c", "run.log", "run.sh", "verdict.json" ] } |