⬢ DragonFlyBSD Kernel Audit
DF-4094 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
{
  "finding_id": "DF-4094",
  "manifest_version": 1,
  "file": "sys/dev/sound/pci/emu10k1.c",
  "verdict": "inconclusive (hardware-gated; source-level certain)",
  "impact": "kernel DMA/heap leak per failed attach (~6KB + mpu401 struct)",
  "reproduce": {
    "build": "n/a (no buildable trigger without emu10k1 PCI hardware)",
    "run": "sh probe.sh  (guest: pciconf | grep 1102 -> none; kldload snd_emu10k1 -> fails)",
    "expected": "On real hardware with a forced late attach failure (IRQ alloc failure / AC97 probe failure), ptb_pages + silent_page + sc->mpu are leaked; bad: path at emu10k1.c:2149 never calls emu_uninit()."
  },
  "kernel_refs": [
    "sys/dev/sound/pci/emu10k1.c:2114",
    "sys/dev/sound/pci/emu10k1.c:1891-1901",
    "sys/dev/sound/pci/emu10k1.c:2119-2133",
    "sys/dev/sound/pci/emu10k1.c:2149-2157",
    "sys/dev/sound/pci/emu10k1.c:2035-2039"
  ],
  "artifacts": ["README.md", "VERDICT.md", "probe.sh", "run.log", "env.txt", "fix.diff", "manifest.json", "verdict.json"]
}