⬢ DragonFlyBSD Kernel Audit
DF-5299 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
{
  "verdict": "inconclusive",
  "impact": "none",
  "finding": "DF-5299 usbd_get_phys() unchecked pci_devinfo* type confusion / NULL-parent deref (Low, speculative)",
  "companion_finding": "DF-5300 usbd_get_iface() OOB pointer arithmetic before bounds check (Info)",
  "reproduce": {
    "build": "cc -O2 -pthread -o usbsoak usbsoak.c",
    "run": "./usbsoak 424242 (with concurrent QEMU-monitor replug storm; see README.md)",
    "expected": "soak done: ops=... (errors expected, panic = FAIL) — no panic, guest stays up"
  },
  "kernel_refs": ["sys/bus/u4b/usb_device.c:2249", "sys/bus/u4b/usb_device.c:2255", "sys/bus/u4b/usb_device.c:2237", "sys/bus/u4b/uvc/uvc_v4l2.c:132"],
  "artifacts": ["README.md", "VERDICT.md", "usbsoak.c", "build.sh", "run.sh", "build.log", "run.log", "run.2.log", "env.txt", "fix.diff", "verdict.json", "manifest.json"]
}