DF-4614 / manifest.json
{ "verdict": "not_reproduced", "impact": "none", "confidence": "certain", "reproduce": { "build": "cc -O0 -g -o harness doublefree_harness.c (on DragonFly guest; run via dfbsd-qemu/vm.sh)", "run": "./harness; echo exit=$?", "expected": "[!] DOUBLE FREE: kfree(#2) on <ptr> already freed at kfree(#1); exit=42 (allocator abort at the point the kernel heap would corrupt). In-kernel trigger requires ServeRAID hardware + DMA-map exhaustion at attach." }, "kernel_refs": [ "sys/dev/raid/ips/ips.c:116-143", "sys/dev/raid/ips/ips.c:414", "sys/dev/raid/ips/ips.c:447-451", "sys/dev/raid/ips/ips.c:462", "sys/dev/raid/ips/ips.c:533" ], "artifacts": [ "README.md", "VERDICT.md", "doublefree_harness.c", "build.log", "run.log", "env.txt", "fix.diff", "manifest.json", "verdict.json" ] } |