DF-5132 / manifest.json
{ "finding_id": "DF-5132", "file": "sys/dev/drm/amd/amdgpu/kv_smc.c", "verdict": "untested", "impact": "none", "confidence": "certain", "summary": "amdgpu_kv_notify_message_to_smu() fail-open response validation: SMC timeout (0x00) and undefined response codes 0x02-0xFD all return success; CI sibling propagates raw result so timeouts are observable", "reproduce": { "build": "none (static analysis): ./check_static.sh /home/maxx/dfbsd/dfbsd", "run": "./check_static.sh /home/maxx/dfbsd/dfbsd", "expected": "ALL STATIC ASSERTIONS PASS: PPSMC_Result_OK==0x01 (ppsmc.h:67); kv_smc.c:47-54 rejects only 0xFF/0xFE with 'return 0' reachable for tmp==0; wait loop treats 0x00 as not-yet-responded; ci_smc.c:187 returns raw PPSMC_Result; radeon/kv_smc.c twin noted" }, "kernel_refs": [ "sys/dev/drm/amd/amdgpu/kv_smc.c:33-55", "sys/dev/drm/amd/amdgpu/kv_smc.c:47-54", "sys/dev/drm/amd/amdgpu/ppsmc.h:67-68", "sys/dev/drm/amd/amdgpu/ci_smc.c:170-187", "sys/dev/drm/radeon/kv_smc.c:30-52" ], "artifacts": [ "README.md", "VERDICT.md", "check_static.sh", "check_static.log", "fix.diff", "manifest.json", "verdict.json" ] } |