DF-5090 / manifest.json
{ "finding_id": "DF-5090", "file": "sys/dev/netif/mii_layer/ruephy.c", "title": "ruephy(4) dead-code driver: unreachable carrier of the DF-4930/DF-5001 empty-media attach-panic leaf and the DF-1973/DF-5009 service KASSERT (no rue(4) NIC driver exists in DragonFly)", "severity": "Info", "verdict": "untested", "impact": "none", "confidence": "certain", "verification_mode": "static (Phase V exempt: Info hardening; runtime trigger unconstructible — parent driver does not exist)", "reproduce": { "build": "none required", "run": "sh findings/poc/DF-5090/proof.sh", "expected": "exit 0; section A lists the only two \"rue\" literals in sys/ as the ruephy probe gates themselves; final line 'PROOF OK: probe gate (ruephy.c:96) can never pass => attach/service/status/reset are unreachable on every kernel buildable from this tree.'" }, "kernel_refs": [ "sys/dev/netif/mii_layer/ruephy.c:96", "sys/dev/netif/mii_layer/ruephy.c:141", "sys/dev/netif/mii_layer/ruephy.c:161", "sys/dev/netif/mii_layer/ruephy.c:282", "sys/bus/u4b/net/ruephy.c:101", "sys/conf/files:1094", "sys/config/X86_64_GENERIC:56", "sys/dev/netif/mii_layer/mii.c:228", "sys/kern/subr_bus.c:2108" ], "artifacts": [ "README.md", "VERDICT.md", "proof.sh", "proof.log", "manifest.json", "verdict.json" ] } |