⬢ DragonFlyBSD Kernel Audit
DF-3833 / manifest.json
← back to finding ↓ download raw
{
  "finding_id": "DF-3833",
  "file": "sys/dev/disk/trm/trm.c",
  "verdict": "inconclusive",
  "impact_class": "kernel panic (local DoS) via stale chip completion after bus-reset recovery",
  "reproduce": {
    "build": "N/A",
    "run": "on hardware: camcontrol bus reset (or external reset) with tagged commands in flight",
    "expected": "panic: NULL pDCB->pActiveSRB read (GENERIC) or KASSERT 'no active DCB' (INVARIANTS), or NULL walk in trm_SRBdone"
  },
  "kernel_refs": ["sys/dev/disk/trm/trm.c:1337", "sys/dev/disk/trm/trm.c:2720", "sys/dev/disk/trm/trm.c:1141"],
  "artifacts": ["README.md", "VERDICT.md", "verdict.json", "fix.diff", "env.txt", "manifest.json"]
}