⬢ DragonFlyBSD Kernel Audit
DF-4913 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
{
  "finding_id": "DF-4913",
  "verdict": "reproduced",
  "impact": "leak",
  "reproduce": {
    "build": "cd /root/DF-4913 && make",
    "run": "kldload ./v14leak.ko; sysctl hw.v14leak=1; vmstat -m | grep -i ath_hal; kldunload v14leak; vmstat -m | grep -i ath_hal",
    "expected": "ath_hal malloc type grows by 600 blocks / ~2.93M per trigger run and does NOT shrink after kldunload; console shows 3x '200 attaches, 0 HAL_OK, 200 with ah_eeprom==NULL' + balanced control"
  },
  "kernel_refs": [
    "sys/dev/netif/ath/ath_hal/ah_eeprom_v14.c:363",
    "sys/dev/netif/ath/ath_hal/ah_eeprom_v14.c:376",
    "sys/dev/netif/ath/ath_hal/ah_eeprom_v14.c:414",
    "sys/dev/netif/ath/ath_hal/ah_eeprom_v14.c:433"
  ],
  "artifacts": ["v14leak.c", "Makefile", "build.sh", "run.sh", "build.log", "run.log", "console.log", "env.txt", "VERDICT.md", "fix.diff", "verdict.json", "manifest.json"]
}