DF-4436 / manifest.json
{ "finding_id": "DF-4436", "verdict": "untested", "impact": "none", "severity": "Info", "confidence": "certain", "title": "drm_universal_plane_init: format_count>64 error path leaks plane->format_types and the registered mode-object id (guard checked after drm_mode_object_add + kmalloc)", "reproduce": { "build": "n/a - trigger is driver-static (format_count > 64 at probe); no in-tree driver trips it", "run": "n/a", "expected": "Out-of-tree driver with >64 plane formats: WARN + leaked kmalloc + leaked IDR mode-object id per probe" }, "kernel_refs": [ "sys/dev/drm/drm_plane.c:193", "sys/dev/drm/drm_plane.c:202", "sys/dev/drm/drm_plane.c:214" ], "artifacts": [ "README.md", "VERDICT.md", "verdict.json", "manifest.json", "fix.diff" ] } |