⬢ DragonFlyBSD Kernel Audit
DF-3792 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
{
  "verdict": "inconclusive",
  "impact": "none (Info hardening; worst case panic with a hypothetical partial-helper driver)",
  "finding_id": "DF-3792",
  "title": "drm_atomic_helper: unguarded funcs->dpms/funcs->commit/crtc->helper_private dereferences (upstream fe6169288666 + 26564be56d73 not carried)",
  "reproduce": {
    "build": "n/a — requires a DRM driver with partial drm_crtc_helper_funcs; none in-tree",
    "run": "n/a — guest has no DRM device (see findings/poc/DF-3791/env.txt)",
    "expected": "Driver with only atomic_check/atomic_begin/atomic_flush (like intel_helper_funcs) using drm_atomic_helper_commit(): first CRTC disable panics in disable_outputs() calling NULL dpms. With fix.diff: mode falls through harmlessly."
  },
  "kernel_refs": [
    "sys/dev/drm/drm_atomic_helper.c:1011",
    "sys/dev/drm/drm_atomic_helper.c:1257",
    "sys/dev/drm/drm_atomic_helper.c:461",
    "sys/dev/drm/drm_atomic_helper.c:1007",
    "sys/dev/drm/i915/intel_display.c:10939",
    "sys/dev/drm/amd/display/amdgpu_dm/amdgpu_dm.c:3403"
  ],
  "artifacts": ["README.md", "VERDICT.md", "fix.diff", "verdict.json", "manifest.json"]
}