DF-3830 / manifest.json
{ "finding_id": "DF-3830", "file": "sys/dev/disk/trm/trm.c", "verdict": "inconclusive", "impact_class": "UAF / CAM wedge on module unload (root/physical trigger, hardware-gated)", "reproduce": { "build": "N/A (kernel module; needs Tekram DC395 PCI adapter)", "run": "on hardware: kldload trm.ko; dd if=/dev/daX ... in background; kldunload trm.ko", "expected": "panic (freed SRB array / released bus space) or permanently wedged CAM queue" }, "kernel_refs": ["sys/dev/disk/trm/trm.c:3692", "sys/dev/disk/trm/trm.c:3696", "sys/dev/disk/trm/trm.c:3700", "sys/dev/disk/trm/trm.c:3710", "sys/dev/disk/trm/trm.c:3714"], "artifacts": ["README.md", "VERDICT.md", "verdict.json", "fix.diff", "env.txt", "manifest.json"] } |