⬢ DragonFlyBSD Kernel Audit
DF-4778 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
{
  "finding_id": "DF-4778",
  "verdict": "untested (no AMD GPU on guest) / code-confirmed",
  "impact": "none (in-bounds data corruption; not memory-unsafe)",
  "reproduce": {
    "build": "n/a (HW-gated)",
    "run": "n/a (HW-gated): needs AMD DCE80-DCE120 DP AUX engine + partially-ACKing sink; DPCD read > 16 bytes",
    "expected": "2nd+ chunks of a continued AUX read appear at buffer offset 0 instead of offset"
  },
  "kernel_refs": [
    "sys/dev/drm/amd/display/dc/i2caux/aux_engine.c:196-208",
    "sys/dev/drm/amd/display/dc/i2caux/aux_engine.c:132-135",
    "sys/dev/drm/amd/display/dc/i2caux/dce110/aux_engine_dce110.c:281-331",
    "sys/dev/drm/amd/display/dc/dce/dce_aux.c:501-502"
  ],
  "artifacts": [
    { "path": "README.md", "type": "readme", "desc": "finding + reproduce + fix" },
    { "path": "VERDICT.md", "type": "verdict", "desc": "line-level trace, bound-safety, reachability, severity" },
    { "path": "fix.diff", "type": "suggested-fix", "desc": "reply.data offset fix in aux_engine.c + dce_aux.c" },
    { "path": "manifest.json", "type": "manifest", "desc": "this file" },
    { "path": "verdict.json", "type": "verdict", "desc": "machine verdict" }
  ]
}