DF-3865 / manifest.json
{ "finding_id": "DF-3865", "title": "DFly rbtree shim never maintains rb_root_cached.rb_leftmost; amdgpu_vm_fini's mapping-cleanup loop (amdgpu_vm.c:3325) is dead code -> mapping leak", "verdict": "not_reproduced", "reproduce": { "build": "./build.sh (static proof; grep of shim macros)", "run": "./run.sh (hardware gate notice)", "expected": "on AMD hw with any mapping left in vm->va at fini: mapping allocations leak (kfree at amdgpu_vm.c:3333 unreachable)" }, "kernel_refs": ["sys/dev/drm/amd/amdgpu/amdgpu_vm.c:3055", "sys/dev/drm/amd/amdgpu/amdgpu_vm.c:3316", "sys/dev/drm/amd/amdgpu/amdgpu_vm.c:3325", "sys/dev/drm/amd/amdgpu/amdgpu_vm.c:3333", "sys/dev/drm/include/linux/rbtree.h:100", "sys/dev/drm/include/linux/rbtree.h:102", "sys/dev/drm/include/linux/rbtree.h:175"], "artifacts": ["README.md", "VERDICT.md", "build.sh", "run.sh", "build.log", "run.log", "env.txt", "fix.diff", "manifest.json", "verdict.json"] } |