⬢ DragonFlyBSD Kernel Audit
DF-3913 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
{
  "finding_id": "DF-3913",
  "title": "intel_sdvo_connector_state leaked on intel_sdvo_connector_init() failure (4 sites)",
  "verdict": "inconclusive",
  "impact": "none",
  "hardware_gated": true,
  "reproduce": {
    "build": "n/a on audit guest (no Intel GPU); on real SDVO hardware: apply faultinject.diff to /usr/src/sys/dev/drm/i915/intel_sdvo.c, rebuild kernel/i915.ko, boot",
    "run": "boot with patch; dmesg | grep DF3913 ; guest-side gate check: ./probe.sh",
    "expected": "faultinject: 'DF3913: DVI connector state (152 bytes) leaked at intel_sdvo.c dvi_init'; with fix.diff also applied the state is freed instead (no leak). On the QEMU guest probe.sh shows i915 never attaches (Bochs VGA only) - path unreachable"
  },
  "kernel_refs": [
    "sys/dev/drm/i915/intel_sdvo.c:2472",
    "sys/dev/drm/i915/intel_sdvo.c:2481",
    "sys/dev/drm/i915/intel_sdvo.c:2487",
    "sys/dev/drm/i915/intel_sdvo.c:2541",
    "sys/dev/drm/i915/intel_sdvo.c:2574",
    "sys/dev/drm/i915/intel_sdvo.c:2620",
    "sys/dev/drm/i915/intel_sdvo.c:2656",
    "sys/dev/drm/drm_atomic_helper.c:3740",
    "sys/dev/drm/drm_atomic_helper.c:3930"
  ],
  "artifacts": [
    "README.md", "VERDICT.md", "faultinject.diff", "probe.sh",
    "fix.diff", "run.log", "env.txt", "manifest.json", "verdict.json"
  ]
}