DF-3588 / verdict.json
{ "finding_id": "DF-3588", "status": "untested", "reproduced": 0, "impact": "OOM-gated double free", "confidence": "certain", "verdict": "Source-certain: si_dpm.c:7256-7260 frees adev->pm.dpm.ps and returns -ENOMEM without nulling; si_dpm_fini frees it again on the dpm_failed path. Verification skipped per contract (Low, OOM-gated). Upstream-identical.", "evidence": "source citations :7256-7260, :7728-7729, :7470-7473", "attempts": 0, "guest_dirty": 0, "runner": "df-bsd-reviewer" } |