DF-5186 / manifest.json
{ "finding_id": "DF-5186", "verdict": "inconclusive", "impact": "none", "reproduce": { "build": "cc -O2 -Wall -pthread -o mapdumb_race mapdumb_race.c && cc -O2 -Wall -o sim_interleave sim_interleave.c", "run": "./mapdumb_race 20000 && ./sim_interleave", "expected": "On DRM hardware: any 'EINVAL != 0' line in the [race] counters row reproduces the unsynchronized offset-hash insert collision; sim_interleave prints the deterministic double-free/dual-link/wrong-object proofs. On this guest: exit 2, 'no /dev/dri node available' (no DRM device exists in QEMU std-VGA and no vgem-style driver exists in-tree)." }, "kernel_refs": [ "sys/dev/drm/drm_dumb_buffers.c:115-130", "sys/dev/drm/drm_ioctl.c:676", "sys/dev/drm/drm_ioctl.c:777", "sys/dev/drm/drm_gem.c:567-606", "sys/dev/drm/drm_gem.c:529-546", "sys/dev/drm/drm_gem.c:1063-1109", "sys/dev/drm/drm_hashtab.c:109-133", "sys/dev/drm/i915/i915_drv.c:3301", "sys/dev/drm/i915/i915_gem.c:2600-2648" ], "artifacts": [ "README.md", "VERDICT.md", "mapdumb_race.c", "sim_interleave.c", "build.sh", "run.sh", "build.log", "run.log", "sim_output.txt", "env.txt", "fix.diff", "manifest.json", "verdict.json" ] } |