DF-3725 / verdict.json
{ "finding_id": "DF-3725", "status": "inconclusive", "reproduced": 0, "impact": "none", "confidence": "certain", "verdict": "Five X550 link/FC setup sites drop hardware-write status values and report success for failed writes (ixgbe_x550.c:4207-4212 setup_fc_backplane drops the AN-cntl pause-advertisement write; :2697-2702 setup_sfi; :2802-2806 CS4227 mode write masked by flush read; :1812-1814 setup_sgmii_fw ignores rc; :2644 setup_kr_speed ignored). DF-3671 family, error propagation only — no memory unsafety; upstream-identical. Runtime inconclusive: no X550 NIC on guest.", "exploit_chain": "", "evidence": "VERDICT.md path:line trace; fix compile-validated DF-3725_make_rc=0 in ../DF-3724/fix_build.log", "kernel_refs": ["sys/dev/netif/ix/ixgbe_x550.c:4207", "sys/dev/netif/ix/ixgbe_x550.c:4212", "sys/dev/netif/ix/ixgbe_x550.c:2802", "sys/dev/netif/ix/ixgbe_x550.c:1812"], "poc_changes": "n/a (source-level)", "attempts": 1, "guest_uname": "DragonFly dfbsd 6.5-DEVELOPMENT #0: Thu Jul 2 06:02:54 UTC 2026 x86_64 (X86_64_GENERIC)", "runtime_sec": 60, "guest_dirty": 0, "build_cmd": "n/a", "run_cmd": "n/a", "code_hash": "", "notes": "Upstream-identical shared-code hygiene; fix.diff propagates all five statuses.", "recommended_fix": "Check and return each dropped write status (fix.diff)", "fix_status": "inconclusive", "fix_baseline_reproduced": 0, "fix_patched_reproduced": 0, "fix_verdict": "fix.diff applied to guest /usr/src; module rebuild clean under -Werror (DF-3725_make_rc=0); reverted. Runtime validation impossible (no X550 hardware).", "fix_evidence": "../DF-3724/fix_build.log: DF-3725_make_rc=0 + md5 restored" } |