DF-5172 / manifest.json
{ "finding_id": "DF-5172", "title": "vcdstrategy() drains sc->bio_queue unlocked (latent SMP race; shielded today by the mplock via missing D_MPSAFE)", "verdict": "not_reproduced", "impact": "none", "reproduce": { "build": "cc -static -O2 -o race src/vcd_race_poc.c (guest; harness per DF-5171)", "run": "./vkernel64 -m 256M -n 4 -r root.img -c hammer.img -e init_path=/race", "expected": "clean survival ('RACE SURVIVED - no crash this run') - the race is impossible while vcd_ops lacks D_MPSAFE; the pack documents the shield and the trigger condition for it dropping" }, "kernel_refs": [ "sys/dev/virtual/vkernel/cdrom/vcd.c:148", "sys/dev/virtual/vkernel/cdrom/vcd.c:67", "sys/kern/kern_device.c:384", "sys/dev/virtual/vkernel/disk/vdisk.c:228" ], "artifacts": [ "README.md", "VERDICT.md", "vcd_race_poc.c", "odcat.c", "guest_prep.sh", "run.log", "run.2.log", "run.s2-failed.log", "run.s3-failed.log", "env.txt", "manifest.json", "verdict.json" ] } |