⬢ DragonFlyBSD Kernel Audit
DF-4122 / run.3.log
← back to finding ↓ download raw
== i915 VBT parse harness (verbatim code from sys/dev/drm/i915/intel_bios.c) ==
mode=edp patched=0

[DF-4122] crafted VBT accepted (74 bytes); BDB_EDP last block declared size = 1 byte
[DF-4122] sizeof(struct bdb_edp) = 216; parse_edp reads edp->color_depth at +160 and power_seqs[0] at +0 with no block-size floor
OOB read confirmed: SIGSEGV touching 0x80047509f (offset +233 from watched buffer base 0x800474fb6)
RESULT: VULNERABLE — out-of-bounds read taken by verbatim kernel parse code (exit 77)