⬢ DragonFlyBSD Kernel Audit
DF-4545 / run.2.log
← back to finding ↓ download raw
  >>> SIGSEGV: fault address 0x0 (od_feature_capabilities + 0)
  >>> SIGSEGV: fault address 0x0 (od_feature_capabilities + 0)
DF-4545 lifted-copy harness: vega20 pptable init succeeds with NULL OD arrays -> vega20_hwmgr.c:906 NULL deref

=== CONTROL rev=1 healthy alloc (ucODTableRevision=1, inject kzalloc failure=0) ===
  >>> consumer completed without fault
  OK (no fault, as expected)

=== VARIANT A crafted ucODTableRevision=2 (ucODTableRevision=2, inject kzalloc failure=0) ===
  >>> consumer NULL-DEREF confirmed (see SIGSEGV line above)
  PANIC-CLASS FAULT REPRODUCED

=== VARIANT B rev=1 ignored -ENOMEM (ucODTableRevision=1, inject kzalloc failure=1) ===
  >>> consumer NULL-DEREF confirmed (see SIGSEGV line above)
  PANIC-CLASS FAULT REPRODUCED

REPRODUCED: init returns success with NULL od arrays (both the revision gate and the dropped -ENOMEM)