⬢ DragonFlyBSD Kernel Audit
DF-3830 / manifest.json
← back to finding ↓ download raw
{
  "finding_id": "DF-3830",
  "file": "sys/dev/disk/trm/trm.c",
  "verdict": "inconclusive",
  "impact_class": "UAF / CAM wedge on module unload (root/physical trigger, hardware-gated)",
  "reproduce": {
    "build": "N/A (kernel module; needs Tekram DC395 PCI adapter)",
    "run": "on hardware: kldload trm.ko; dd if=/dev/daX ... in background; kldunload trm.ko",
    "expected": "panic (freed SRB array / released bus space) or permanently wedged CAM queue"
  },
  "kernel_refs": ["sys/dev/disk/trm/trm.c:3692", "sys/dev/disk/trm/trm.c:3696", "sys/dev/disk/trm/trm.c:3700", "sys/dev/disk/trm/trm.c:3710", "sys/dev/disk/trm/trm.c:3714"],
  "artifacts": ["README.md", "VERDICT.md", "verdict.json", "fix.diff", "env.txt", "manifest.json"]
}