⬢ DragonFlyBSD Kernel Audit
DF-3697 / run.log
← back to finding ↓ download raw
crafted amdgpufw_raven_rlc.evil: 256 bytes
  header_version = 2.1  -> gfx_v9_0_init_rlc_ext_microcode() runs
  save_restore_list_cntl = fw->data + 0x10000, size 0x1000
  on PSP-load devices this feeds memcpy(dst, fw->data+0x10000, 0x1000)
  at amdgpu_ucode.c:381-384 -> OOB kernel heap read / panic
-rw-r--r--  1 root  wheel  256 Sep 15 18:17 amdgpufw_raven_rlc.evil
MD5 (fwgen_rlc.c) = c041dbf69d66c0007e2844fe18385c4a