DF-4430 / manifest.json
{ "verdict": "source-verified", "impact": "wrong-pages data divergence for PRIME imports + permanent pool-page/accounting leak per import cycle (DoS); Low (multi-GPU reachability)", "reproduce": { "build": "cc -O2 -o poc_prime_import poc_prime_import.c", "run": "DRM_EXPORT=/dev/dri/card0 DRM_IMPORT=/dev/dri/card1 ./poc_prime_import", "expected": "imported BO never reflects exporter writes (wrong pages); wired kernel memory grows ~BO_SZ per cycle across 10k cycles (leak)" }, "kernel_refs": [ "sys/dev/drm/radeon/radeon_ttm.c:753", "sys/dev/drm/radeon/radeon_ttm.c:779", "sys/dev/drm/radeon/radeon_ttm.c:808", "sys/dev/drm/radeon/radeon_prime.c:73", "sys/dev/drm/ttm/ttm_tt.c:71", "sys/dev/drm/ttm/ttm_tt.c:215", "sys/dev/drm/ttm/ttm_page_alloc.c:890", "sys/dev/drm/amd/amdgpu/amdgpu_ttm.c:1268" ], "artifacts": [ "README.md", "VERDICT.md", "poc_prime_import.c", "build.sh", "run.sh", "fix.diff", "env.txt", "verdict.json", "manifest.json" ] } |