⬢ DragonFlyBSD Kernel Audit
DF-4619 / fix_run.log
← back to finding ↓ download raw
}
0
=== FIX-VALIDATION (all 3 fixes) ===
--- mode 1
sizeof(struct ar5413State)=2040 offsetof(pcdacTable)=72 Bank1Data=328 vpdTable_I=1524
mode=1 numPdGainsUsed(ret)=4 minPower=0x0000
DF-4619: NO overflow detected
exit=1
--- mode 2
mapped wild pages 0xa00490000 0x200402000, seeded 0x5A5A
sizeof(struct ar5413State)=2040 offsetof(pcdacTable)=72 Bank1Data=328 vpdTable_I=1524
mode=2 numPdGainsUsed(ret)=0 minPower=0x7c7c
gainBoundaries[0] = 0x0000 (== 0x5A5A => wild read at gb+0x1FFFFFFFE, ar5413.c:528, then written to TPCRG5 by ar5413SetPowerTable:639-644)
pcdacTable[0] = 0xaaaa (== 0x5A5A => wild read at pcdacTable+0x1FFFFFFFE, ar5413.c:532, replicated across the pdadc table / 32 PHY reg writes)
minPower out = 0x7c7c (uninitialized Pmin_t2[0] stack read at ar5413.c:468; dataset carries no power data)
exit=1
--- mode 3
sizeof(struct ar5413State)=2040 offsetof(pcdacTable)=72 Bank1Data=328 vpdTable_I=1524
mode=3 numPdGainsUsed(ret)=4 minPower=0x003e
gainBoundaries[0] = 0x003e (== 0x5A5A => wild read at gb+0x1FFFFFFFE, ar5413.c:528, then written to TPCRG5 by ar5413SetPowerTable:639-644)
pcdacTable[0] = 0xaaaa (== 0x5A5A => wild read at pcdacTable+0x1FFFFFFFE, ar5413.c:532, replicated across the pdadc table / 32 PHY reg writes)
minPower out = 0x003e (uninitialized Pmin_t2[0] stack read at ar5413.c:468; dataset carries no power data)
exit=1