⬢ DragonFlyBSD Kernel Audit
DF-4027 / manifest.json
← back to finding ↓ download raw
{
  "finding_id": "DF-4027",
  "title": "sili deferred timeout returns port-owned ccb (ATA_S_ONCHIP) to poll callers which put it back on the free list - ccb double lifecycle, stale dmamap unload, double CAM completion",
  "verdict": "not_reproduced",
  "impact": "none",
  "confidence": "likely",
  "fix_status": "not_testable",
  "reproduce": {
    "build": "cc -O2 -o sili_model sili_model.c && ./sili_model (state-machine model; hardware trigger requires a sili(4) HBA)",
    "run": "./sili_model",
    "expected": "prints the deferred-timeout interleaving and the double-lifecycle consequences; live trigger needs SiLion Image 3124/3132 HBA + stalling PM target"
  },
  "kernel_refs": [
    "sys/dev/disk/sili/sili.c:1311-1360",
    "sys/dev/disk/sili/sili.c:2488-2511",
    "sys/dev/disk/sili/sili.c:2002-2030",
    "sys/dev/disk/sili/sili.c:403-413",
    "sys/dev/disk/sili/sili_cam.c:315-321",
    "sys/dev/disk/sili/sili_cam.c:1331-1334"
  ],
  "artifacts": [
    "README.md", "VERDICT.md", "sili_model.c", "build.sh", "run.sh",
    "build.log", "run.log", "manifest.json", "verdict.json"
  ]
}