⬢ DragonFlyBSD Kernel Audit
DF-5276 / run.t1.log
← back to finding ↓ download raw
t1: launching verbatim pci_read_vpd(): String item length 0
t1: parser does kmalloc(remain+1) == kmalloc(1), then state 1
t1: writes one payload byte per VPD byte with no bound...

*** SIGSEGV writing 0x800476000 during phase 't1: zero-length VPD identifier string (DF-5276)' ***
    faulting allocation: base=0x800475000 kmalloc size=1 (guard page at +4096)
    => 4096 bytes were written past a 1-byte kmalloc allocation