⬢ DragonFlyBSD Kernel Audit
DF-5074 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
{
  "finding_id": "DF-5074",
  "verdict": "untested",
  "impact": "none",
  "confidence": "certain",
  "reproduce": {
    "build": "none — no triggerable path exists (see VERDICT.md)",
    "run": "gate documentation in run.log",
    "expected": "n/a — defect is structural: no device_detach method means every teardown path (devctl delete, kldunload) fails ENXIO before the softc is freed, so the dangling handler/ioctl/sysctl references are never exercised; harm is resource pinning + blocked kldunload + latent DF-5006-class UAF if a bare detach is ever added"
  },
  "kernel_refs": [
    "sys/dev/acpica/acpi_acad.c:76",
    "sys/dev/acpica/acpi_acad.c:82",
    "sys/dev/acpica/acpi_acad.c:172",
    "sys/dev/acpica/acpi_acad.c:180",
    "sys/dev/acpica/acpi_acad.c:183",
    "sys/dev/acpica/acpi_acad.c:193",
    "sys/dev/acpica/acpi_acad.c:195",
    "sys/dev/acpica/acpi_acad.c:140",
    "sys/kern/subr_bus.c:2139",
    "sys/kern/subr_bus.c:901",
    "sys/kern/subr_kobj.c:69"
  ],
  "artifacts": [
    "README.md", "VERDICT.md", "run.log", "env.txt", "fix.diff",
    "manifest.json", "verdict.json"
  ]
}