⬢ DragonFlyBSD Kernel Audit
DF-5206 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
{
  "finding_id": "DF-5206",
  "verdict": "untested",
  "impact": "none",
  "confidence": "certain",
  "reason_not_run": "Hardware-absent: requires AMD Trinity (HD 7xxx APU) SMC firmware that never grants the mutex; QEMU audit guest has no radeon GPU and the functions are only reached through the radeon DPM core. Info-class hardening finding, exempt from Phase V.",
  "reproduce": {
    "build": "(none — no PoC authored)",
    "run": "(none)",
    "expected": "On real TN hardware with a non-granting SMC: trinity_acquire_mutex returns after 100 ms with the mutex unheld and callers proceed to program SMC registers. With fix.diff: -ETIME propagates and every live caller bails out with an error log."
  },
  "kernel_refs": [
    "sys/dev/drm/radeon/trinity_smc.c:112",
    "sys/dev/drm/radeon/trinity_smc.c:117",
    "sys/dev/drm/radeon/trinity_smc.c:122",
    "sys/dev/drm/radeon/trinity_dpm.c:1109",
    "sys/dev/drm/radeon/trinity_dpm.c:1258"
  ],
  "artifacts": ["README.md", "VERDICT.md", "analysis.txt", "fix.diff", "verdict.json", "manifest.json"],
  "fix_diff": "fix.diff"
}