⬢ DragonFlyBSD Kernel Audit
DF-3814 / manifest.json
← back to finding ↓ download raw
{
  "finding_id": "DF-3814",
  "title": "Reallocating diag reset tears down all interrupt handlers and never re-establishes them",
  "verdict": "inconclusive",
  "impact": "none demonstrated at runtime (no hardware); source-certain controller-dead DoS",
  "reproduce": {
    "build": "n/a (kernel path)",
    "run": "on SAS3 host: trigger a facts-changing diag reset (e.g. FW download ioctl + reset, or fault with changed facts)",
    "expected": "controller permanently loses completion interrupts; sync commands hang forever (timeout=0 lksleep) or panic via mpr.c:846/862; CAM frozen"
  },
  "kernel_refs": [
    "sys/dev/raid/mpr/mpr.c:630-634",
    "sys/dev/raid/mpr/mpr.c:714-723",
    "sys/dev/raid/mpr/mpr.c:801-803",
    "sys/dev/raid/mpr/mpr.c:861",
    "sys/dev/raid/mpr/mpr.c:879",
    "sys/dev/raid/mpr/mpr_pci.c:331-349"
  ],
  "artifacts": ["README.md", "VERDICT.md", "probe.log", "fix.diff", "manifest.json", "verdict.json"]
}