DragonFlyBSD Kernel Audit
DF-2572 / run.log
← back to finding ↓ download raw
=== DF-2572: ng_device global SLIST race (UAF / NULL-deref) ===
Checking if /dev/ngd0 exists...
/dev/ngd0 does NOT exist.
The ng_device module (sys/netgraph/ng_device.c) is orphaned dead code:
  - not in sys/conf/files (only netgraph7/ng_device.c is, at :1699)
  - not in sys/config/X86_64_GENERIC
  - cannot compile (removed cdevsw / make_dev / d_*_t API)
  - not in the running kernel (nm count = 0)
The maintained netgraph7/ng_device.c has NO global SLIST (per-node priv
+ dev->si_drv1 direct pointer) and proper mutexes -> this bug is absent there.
See VERDICT.md for the full reachability analysis.
RUN_EXIT=0 (nothing to trigger)
RUN_DONE=0