⬢ DragonFlyBSD Kernel Audit
DF-3766 / manifest.json
← back to finding ↓ download raw
{
  "finding_id": "DF-3766",
  "verdict": "inconclusive",
  "reproduced": 0,
  "impact": "leak",
  "confidence": "certain",
  "reproduce": {
    "build": "cc -Wall -O2 -o df3766_indx_wrap df3766_indx_wrap.c",
    "run": "./df3766_indx_wrap /dev/dri/renderD128",
    "expected": "panic (DF-3763) / dmesg NUM_VERTICES leak (DF-3764) / ioctl returns 0 = bypass (DF-3765/3766)"
  },
  "kernel_refs": [
    "sys/dev/drm/radeon/r100.c:1902-1918 (r100_cs_track_check_pkt3_indx_buffer)",
    "sys/dev/drm/radeon/r100.c:1938-1950 (PACKET3_INDX_BUFFER handler feeds it)"
  ],
  "artifacts": [
    "df3766_indx_wrap.c",
    "build.sh",
    "run.sh",
    "build.log",
    "run.log",
    "env.txt",
    "fix.diff",
    "VERDICT.md",
    "manifest.json",
    "verdict.json"
  ]
}