⬢ DragonFlyBSD Kernel Audit
DF-4638 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
{
  "verdict": "untested (latent API hazard, no overflowing in-tree caller; fix compile-validated on guest)",
  "impact": "none demonstrated — defense-in-depth for a live igb VF-path API",
  "reproduce": {
    "build": "n/a (hardening finding); fix validated with: cc -fsyntax-only -D_KERNEL -I/usr/obj/usr/src/sys/X86_64_GENERIC -I/usr/src/sys -I/usr/src/sys/dev/netif/ig_hal e1000_mbx_fixed.c",
    "run": "n/a (no e1000/SR-IOV hardware on guest)",
    "expected": "n/a — the artifact is the clamp/reject fix.diff, git-apply-clean, syntax-RC=0"
  },
  "kernel_refs": [
    "sys/dev/netif/ig_hal/e1000_mbx.c:80-81",
    "sys/dev/netif/ig_hal/e1000_mbx.c:105-106",
    "sys/dev/netif/ig_hal/e1000_mbx.c:246-263",
    "sys/dev/netif/ig_hal/e1000_mbx.c:275-294",
    "sys/dev/netif/ig_hal/e1000_vf.c",
    "sys/dev/netif/igb/if_igb.c:108"
  ],
  "artifacts": ["README.md", "VERDICT.md", "fix.diff", "env.txt", "build.log", "verdict.json", "manifest.json"]
}