DF-3059 / verdict.json
{ "finding_id": "DF-3059", "status": "not_reproduced", "reproduced": 0, "impact": "none", "confidence": "certain", "verdict": "Not executable on this rig for the same reason as DF-3058: dirfs is dead code (no Makefile, not built into any kernel or module, mount_dirfs refuses real kernels), so the lutimes(path, NULL)-always behavior (dirfs_subr.c:661 via dirfs_vnops.c:556-568) could not be exercised. Code-certain contract breach.", "exploit_chain": "", "evidence": "VERDICT.md + run.log + sources", "kernel_refs": [ "sys/vfs/dirfs/dirfs_vnops.c:556", "sys/vfs/dirfs/dirfs_subr.c:661" ], "poc_changes": "none", "attempts": 0, "guest_uname": "DragonFly dfbsd 6.5-DEVELOPMENT #0: Thu Jul 2 06:02:54 UTC 2026 root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC x86_64", "runtime_sec": 0, "guest_dirty": 0, "build_cmd": "", "run_cmd": "see README.md", "code_hash": null, "notes": "fix_status: not_testable (not reproduced)", "recommended_fix": "diff: build tv[2] from vap->va_atime/va_mtime (VA_UTIMES_NULL -> NULL) and pass to lutimes; fail EOPNOTSUPP on explicit times if unsupported.\n" } |