⬢ DragonFlyBSD Kernel Audit
DF-3614 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
{
 "finding_id": "DF-3614",
 "title": "Heap OOB write past SISLANDS_SMC_STATETABLE.lowSMIO[32] via untrimmed SVI2 VDDCI voltage-table count in si_populate_smc_voltage_table",
 "severity": "Medium",
 "verdict": "reproduced",
 "impact": "dos",
 "confidence": "certain",
 "reproduce": {
  "build": "sh build.sh",
  "run": "sh run.sh",
  "expected": "see VERDICT.md 'expected output'"
 },
 "kernel_refs": [
  "sys/dev/drm/radeon/si_dpm.c:4046",
  "sys/dev/drm/radeon/si_dpm.c:3998",
  "sys/dev/drm/radeon/si_dpm.c:4079",
  "sys/dev/drm/radeon/si_dpm.c:4058",
  "sys/dev/drm/radeon/sislands_smc.h:215",
  "sys/dev/drm/radeon/si_dpm.h:196"
 ],
 "artifacts": [
  "harness.c",
  "build.sh",
  "run.sh",
  "build.log",
  "run.log",
  "fix.diff",
  "fix_build.log",
  "fix_run.log",
  "VERDICT.md",
  "README.md",
  "manifest.json",
  "verdict.json"
 ]
}