⬢ DragonFlyBSD Kernel Audit
DF-4185 / manifest.json
← back to finding ↓ download raw
{
  "finding_id": "DF-4185",
  "title": "acd_fixate() divide-by-zero panic when all acd_get_cap() capability reads failed at attach (cur_write_speed stays 0)",
  "verdict": "reproduced",
  "impact": "panic",
  "reproduce": {
    "build": "guest: cc -O -o /tmp/fixate_stackread /tmp/fixate_stackread.c ; kernel: cd /usr/src && make -j6 nativekernel KERNCONF=X86_64_GENERIC (with emu hook; loader.conf.local: df_audit.mode=1, df_audit.capfail=1)",
    "run": "/tmp/fixate_stackread /dev/acd0",
    "expected": "Fatal trap 18: integer divide fault; Stopped at acd_ioctl+0x1842: idivl %ecx,%eax; guest down at DDB"
  },
  "kernel_refs": ["sys/dev/disk/nata/atapi-cd.c:1158", "sys/dev/disk/nata/atapi-cd.c:1706", "sys/dev/disk/nata/atapi-cd.c:144"],
  "artifacts": ["README.md", "VERDICT.md", "panic.txt", "panic_serial_full.log", "fix.diff", "verdict.json", "manifest.json"]
}