DF-4245 / env.txt
Guest (single-tenant QEMU/KVM exploitation target of this audit): DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul 2 06:02:54 UTC 2026 root:dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC x86_64 Hardware-gate probe (run 2026-09-18T22:25:08Z): $ pciconf -l | grep -i -E "dpt|1044" -> NO DPT (vendor 1044) PCI device present $ ls /boot/kernel/ | grep -i dpt -> no dpt module in /boot/kernel (driver not built into X86_64_GENERIC) Conclusion: the DPT SmartRAID HBA that sys/dev/raid/dpt/dpt_scsi.c drives does not exist in this guest, and QEMU ships no emulation of any DPT SmartRAID controller (its SCSI HBA emulation covers BusLogic/LSI only). Every entry point in this driver (probe/attach config pages, EATA DMA status packets, HBA register reads in dpt_intr) is reachable only through the physical card. Findings are therefore established at source level, with layout/arithmetic harnesses compiled and executed on the guest where a faithful userspace model exists. Kernel-level triggering: untested.