⬢ DragonFlyBSD Kernel Audit
DF-4614 / manifest.json
← back to finding ↓ download raw
{
  "verdict": "not_reproduced",
  "impact": "none",
  "confidence": "certain",
  "reproduce": {
    "build": "cc -O0 -g -o harness doublefree_harness.c (on DragonFly guest; run via dfbsd-qemu/vm.sh)",
    "run": "./harness; echo exit=$?",
    "expected": "[!] DOUBLE FREE: kfree(#2) on <ptr> already freed at kfree(#1); exit=42 (allocator abort at the point the kernel heap would corrupt). In-kernel trigger requires ServeRAID hardware + DMA-map exhaustion at attach."
  },
  "kernel_refs": [
    "sys/dev/raid/ips/ips.c:116-143",
    "sys/dev/raid/ips/ips.c:414",
    "sys/dev/raid/ips/ips.c:447-451",
    "sys/dev/raid/ips/ips.c:462",
    "sys/dev/raid/ips/ips.c:533"
  ],
  "artifacts": [
    "README.md",
    "VERDICT.md",
    "doublefree_harness.c",
    "build.log",
    "run.log",
    "env.txt",
    "fix.diff",
    "manifest.json",
    "verdict.json"
  ]
}