DF-4662 / manifest.json
{ "finding_id": "DF-4662", "title": "ar2413: flat EEPROM power curve -> VpdTable_I[ii][sizeCurrVpdTable-1/-2] uint32-wrap wild reads (twin of DF-4622/ar5413, DF-4650/ar2316)", "verdict": "reproduced", "impact": "dos", "reproduce": { "build": "cd /root/df2413 && sh build.sh", "run": "./ar2413_harness 3", "expected": "REPRODUCED: SIGSEGV si_addr=0x20040286a == expected wild address (vpdTable_I[0][0]+0x1FFFFFFFE); MATCH" }, "kernel_refs": [ "sys/dev/netif/ath/ath_hal/ar5212/ar2413.c:457", "sys/dev/netif/ath/ath_hal/ar5212/ar2413.c:464-465" ], "artifacts": [ "README.md", "VERDICT.md", "ar2413_harness.c", "build.sh", "run.sh", "fix_validate.sh", "fix.diff", "build.log", "run.log", "fix_run.log", "env.txt", "manifest.json", "verdict.json" ] } |