# DF-4358 VERDICT — kprintf %p pointer disclosure (Info)

**Status: UNTESTED (Info-severity hardening finding; no PoC required per
audit contract — "Skip for Low/Info hardening findings").**

Certainty of the finding itself: **certain** (source is one grep away,
amdgpu_kms.c:185-186, and upstream v5.0/5.2/5.4 verified not to have it).
Demonstrating the print at runtime requires an AMD GPU to attach, which
this audit guest does not have; the kprintf is unconditional at attach, so
behavioral verification would be trivial on any AMD-equipped host.

Impact ceiling: kernel heap pointer disclosure to unprivileged local users
via dmesg; near-zero practical value on KASLR-less DragonFly today.

Fix: remove the kprintf (fix.diff; apply-check OK on guest /usr/src;
compile-validated by the patched buildkernel run).

## Fix status (batch validation)
Applied with the 36 sibling fix.diffs of this batch in findings/poc/_batch41/all_fixes.patch; single in-guest `make -j6 nativekernel KERNCONF=X86_64_GENERIC` completed RC=0 with zero errors under -Werror (full log: findings/poc/_batch41/fix_build8.log). Behavior A/B intentionally skipped for this Info-tier item.