{
 "finding_id": "DF-2444",
 "verdict": "reproduced",
 "impact": "none",
 "reproduce": {
  "build": "see build.sh (dfmisc.ko + dm.ko)",
  "run": "sysctl kern.dfmiscgo=dmeexist",
  "expected": "dm_dev_create on the EEXIST path hands out a pointer to freed memory: production call #1 (name df2444x) returned 0; production call #2 with the same name returned EEXIST (17) AND set the out-parameter"
 },
 "kernel_refs": [
  "sys/dev/disk/dm/dm_dev.c:264",
  "sys/dev/disk/dm/dm_dev.c:267",
  "sys/dev/disk/dm/dm_ioctl.c:213"
 ],
 "artifacts": [
  "README.md",
  "VERDICT.md",
  "build.sh",
  "dfmisc.c",
  "env.txt",
  "fix.diff",
  "manifest.json",
  "run.log",
  "run.sh",
  "verdict.json"
 ]
}