⬢ DragonFlyBSD Kernel Audit
DF-3744 / run.log
← back to finding ↓ download raw
fake-EDID: len=200 ; 200 of 200 bytes read from BEYOND the VBIOS image end (heap OOB read -> kmalloc'd EDID)
bad record 92 at +8392 (walk already 201 bytes past image end)
total OOB byte reads in model: 202
kernel: bytes past rdev->bios kmalloc'd image copied into bios_hardcoded_edid: 200
REPRODUCED (harness): unbounded record walk reads/copies past VBIOS buffer
exit_code=0