⬢ DragonFlyBSD Kernel Audit
DF-3683 / run.log
← back to finding ↓ download raw
sizeof(pp_atomctrl_voltage_table)=268 entries_capacity=256 bytes
out-of-bounds entry writes observed: 223 (first at +0 bytes past entries[31])
vddci_voltage_table.count corrupted: 632 (expected 0)
vddci_voltage_table.entries[0].value: 0 (expected 0)
vddgfx_voltage_table.entries[0].value: 0 (expected 0)
mgcg_cgtt_local2 after overflow: 0x0 (expected 0xa5a5a5a5)
canary[0] CORRUPTED: 0xa5a502dd
canary[1] CORRUPTED: 0x0
canary[2] CORRUPTED: 0xa5a502de
canary[3] CORRUPTED: 0x0
canary[4] CORRUPTED: 0xa5a502df
canary[5] CORRUPTED: 0x0
canary[6] CORRUPTED: 0xa5a502e0
canary[7] CORRUPTED: 0x0
canary[8] CORRUPTED: 0xa5a502e1
canary[9] CORRUPTED: 0x0
canary[10] CORRUPTED: 0xa5a502e2
canary[11] CORRUPTED: 0x0
canary[12] CORRUPTED: 0xa5a502e3
canary[13] CORRUPTED: 0x0
canary[14] CORRUPTED: 0xa5a502e4
canary[15] CORRUPTED: 0x0
canary[16] CORRUPTED: 0xa5a502e5
canary[17] CORRUPTED: 0x0
canary[18] CORRUPTED: 0xa5a502e6
canary[19] CORRUPTED: 0x0
canary[20] CORRUPTED: 0xa5a502e7
canary[21] CORRUPTED: 0x0
canary[22] CORRUPTED: 0xa5a502e8
canary[23] CORRUPTED: 0x0
canary[24] CORRUPTED: 0xa5a502e9
canary[25] CORRUPTED: 0x0
canary[26] CORRUPTED: 0xa5a502ea
canary[27] CORRUPTED: 0x0
canary[28] CORRUPTED: 0xa5a502eb
canary[29] CORRUPTED: 0x0
canary[30] CORRUPTED: 0xa5a502ec
RESULT: OOB WRITE CONFIRMED - 223 forged entries written past entries[32], clobbering vddci/mvdd/vddgfx tables and backend fields
exit=0