⬢ DragonFlyBSD Kernel Audit
DF-4601 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
{
  "finding_id": "DF-4601",
  "file": "sys/dev/drm/amd/display/dc/dce112/dce112_compressor.c",
  "title": "dce112_compressor_construct() init-order defects: dead 64-bit-bus LPT guard + lpt_channels_num wipe (case 1 of program_lpt_control unreachable)",
  "verdict": "not_reproduced",
  "impact": "none",
  "reproduced": false,
  "reproduce": {
    "build": "guest$ cd /tmp/df4601 && sh build.sh   (cc -O2 -Wall -o construct_order construct_order.c)",
    "run": "guest$ /tmp/df4601/run.sh",
    "expected": "PROOF-1 OK (memory_bus_width==64 but LPT_SUPPORT stays 1 — guard at :802 evaluated before the field is assigned at :810); PROOF-2 OK (lpt_channels_num==0 at use — the :797 value wiped at :818, so case 1 at :678 unreachable); RESULT: DEFECT CONFIRMED, exit 0"
  },
  "kernel_refs": [
    "sys/dev/drm/amd/display/dc/dce112/dce112_compressor.c:797",
    "sys/dev/drm/amd/display/dc/dce112/dce112_compressor.c:802",
    "sys/dev/drm/amd/display/dc/dce112/dce112_compressor.c:810",
    "sys/dev/drm/amd/display/dc/dce112/dce112_compressor.c:818",
    "sys/dev/drm/amd/display/dc/dce112/dce112_compressor.c:675",
    "sys/dev/drm/amd/display/dc/dce112/dce112_compressor.c:645"
  ],
  "artifacts": [
    "construct_order.c", "build.sh", "run.sh", "build.log", "run.log",
    "env.txt", "README.md", "VERDICT.md", "fix.diff", "manifest.json",
    "verdict.json"
  ]
}