DF-3766 / manifest.json
{ "finding_id": "DF-3766", "verdict": "inconclusive", "reproduced": 0, "impact": "leak", "confidence": "certain", "reproduce": { "build": "cc -Wall -O2 -o df3766_indx_wrap df3766_indx_wrap.c", "run": "./df3766_indx_wrap /dev/dri/renderD128", "expected": "panic (DF-3763) / dmesg NUM_VERTICES leak (DF-3764) / ioctl returns 0 = bypass (DF-3765/3766)" }, "kernel_refs": [ "sys/dev/drm/radeon/r100.c:1902-1918 (r100_cs_track_check_pkt3_indx_buffer)", "sys/dev/drm/radeon/r100.c:1938-1950 (PACKET3_INDX_BUFFER handler feeds it)" ], "artifacts": [ "df3766_indx_wrap.c", "build.sh", "run.sh", "build.log", "run.log", "env.txt", "fix.diff", "VERDICT.md", "manifest.json", "verdict.json" ] } |