⬢ DragonFlyBSD Kernel Audit
DF-5186 / manifest.json
← back to finding ↓ download raw
{
  "finding_id": "DF-5186",
  "verdict": "inconclusive",
  "impact": "none",
  "reproduce": {
    "build": "cc -O2 -Wall -pthread -o mapdumb_race mapdumb_race.c && cc -O2 -Wall -o sim_interleave sim_interleave.c",
    "run": "./mapdumb_race 20000 && ./sim_interleave",
    "expected": "On DRM hardware: any 'EINVAL != 0' line in the [race] counters row reproduces the unsynchronized offset-hash insert collision; sim_interleave prints the deterministic double-free/dual-link/wrong-object proofs. On this guest: exit 2, 'no /dev/dri node available' (no DRM device exists in QEMU std-VGA and no vgem-style driver exists in-tree)."
  },
  "kernel_refs": [
    "sys/dev/drm/drm_dumb_buffers.c:115-130",
    "sys/dev/drm/drm_ioctl.c:676",
    "sys/dev/drm/drm_ioctl.c:777",
    "sys/dev/drm/drm_gem.c:567-606",
    "sys/dev/drm/drm_gem.c:529-546",
    "sys/dev/drm/drm_gem.c:1063-1109",
    "sys/dev/drm/drm_hashtab.c:109-133",
    "sys/dev/drm/i915/i915_drv.c:3301",
    "sys/dev/drm/i915/i915_gem.c:2600-2648"
  ],
  "artifacts": [
    "README.md", "VERDICT.md", "mapdumb_race.c", "sim_interleave.c",
    "build.sh", "run.sh", "build.log", "run.log", "sim_output.txt",
    "env.txt", "fix.diff", "manifest.json", "verdict.json"
  ]
}