⬢ DragonFlyBSD Kernel Audit
DF-3598 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
{
  "finding_id": "DF-3598",
  "title": "gfx_v8_0_init_microcode ignores amdgpu_ucode_validate() result for RLC firmware (asymmetric size gate)",
  "verdict": "inconclusive",
  "impact": "gate bypass feeding DF-1133 heap OOB loops and OOB header reads on truncated RLC fw",
  "reproduce": {
    "build": "(no build; source assertion)",
    "run": "./run.sh",
    "expected": "line 1082 prints UNGUARDED while all five other validate sites print GUARDED"
  },
  "kernel_refs": [
    "sys/dev/drm/amd/amdgpu/gfx_v8_0.c:1082",
    "sys/dev/drm/amd/amdgpu/gfx_v8_0.c:1083",
    "sys/dev/drm/amd/amdgpu/gfx_v8_0.c:1106",
    "sys/dev/drm/amd/amdgpu/amdgpu_ucode.h:79"
  ],
  "artifacts": ["run.sh", "run.log", "README.md", "VERDICT.md", "fix.diff", "manifest.json", "verdict.json"]
}