⬢ DragonFlyBSD Kernel Audit
DF-4259 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
{
  "finding_id": "DF-4259",
  "verdict": "inconclusive",
  "impact_source_level": "RX DMA into freed/reused mbuf clusters (packet-controlled kernel heap corruption) after engine stop is requested but not awaited",
  "reproduce": {
    "build": "n/a",
    "run": "on a machine with a Myson NIC: flood the link (ping -f) while looping ifconfig my0 down/up",
    "expected": "occasional panic / corruption with ethernet payload bytes at the fault address"
  },
  "kernel_refs": [
    "sys/dev/netif/my/if_my.c:1643-1680",
    "sys/dev/netif/my/if_my.c:705-717",
    "sys/dev/netif/my/if_my.c:1417"
  ],
  "artifacts": ["trigger.sh", "env.txt", "VERDICT.md", "fix.diff", "manifest.json", "verdict.json"]
}