⬢ DragonFlyBSD Kernel Audit
DF-4853 / build.log
← back to finding ↓ download raw
sizeof(drm_display_mode)        = 240
sizeof(radeon_encoder_lvds)     = 280   <- enc_priv of LCD-carrying digital encoders
sizeof(radeon_encoder_atom_dig) = 312   <- what evergreen_hdmi.c assumes
offsetof(dig, afmt)             = 288   <- dig->afmt on lvds obj (evergreen_hdmi.c:431)
offsetof(afmt, enabled)         = 0   <- wild write target (evergreen_hdmi.c:458)
offsetof(afmt, offset)          = 4   <- wild read feeding MMIO (:438-455)
=> dig->afmt reads 8 byte(s) PAST the 280-byte lvds object (280 -> 288-byte slab chunk, ZERO slack) into the ADJACENT chunk