⬢ DragonFlyBSD Kernel Audit
DF-5426 / run.log
← back to finding ↓ download raw
=== env ===
DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64
=== pass 1 ===
=== pass 2 (re-run for stability) ===
=== dmesg (new) ===
NEG: rig loaded (production usb_handle_request.c, driver-leg=1)
NEG: canary: guard checker detects 1-byte writes (n=1) OK
NEG: battery start
NEG: [I01 GET_CONFIG wL=1] contained
NEG: [I02 GET_CONFIG wL=64 (short-terminate)] contained
NEG: [I03 GET_CONFIG wL=0] contained
NEG: [I04 GET_STATUS(dev) wL=2] contained
NEG: [I05 GET_STATUS(dev) wL=8] contained
NEG: [I06 GET_STATUS(dev) wL=0xFFFF (wrap feeder)] contained
NEG: [I07 GET_STATUS(dev) wL=0] contained
NEG: [I08 GET_STATUS(ep 0x81) wL=2] contained
NEG: [I09 GET_STATUS(ep 0x7F nonexistent)] contained
NEG: [I10 SET_ADDRESS 0x7F (valid)] contained
NEG: [I11 SET_ADDRESS 0x80 (invalid)] contained
NEG: [I12 SET_ADDRESS 0xFFFF (invalid)] contained
NEG: [I13 CLEAR_FEATURE(halt ep 0x81)] contained
NEG: [I14 SET_FEATURE(halt ep 0x81)] contained
NEG: [I15 CLEAR_FEATURE(halt ep 0x33 nonexistent)] contained
NEG: [T01 GET_DESC(dev) len=18 wL=18 exact] contained
NEG: [T02 GET_DESC(dev) len=18 wL=64] contained
NEG: [T03 GET_DESC(dev) len=18 wL=0xFFFF] contained
NEG: [T04 GET_DESC(cfg) len=4096 wL=4096 multi-frag] contained
NEG: [T05 GET_DESC(cfg) len=2048 wL=4096 (short)] contained
NEG: [T06 GET_DESC(cfg) len=1024 wL=1024 exact] contained
NEG: [T07 GET_DESC(cfg) len=1025 wL=4096] contained
NEG: [T08 GET_DESC(str) len=255 wL=255 exact] contained
NEG: [T09 GET_DESC(str) len=2 wL=1] contained
NEG: [T10 GET_DESC len=1 wL=0xFFFF] contained
NEG: [T11 vendor req, provider stalls] contained
NEG: [T12 vendor-class desc len=52 wL=255 (iface decline first)] contained
NEG:   frag1 window [0xfffff80118919400,0xfffff80118919800) vs provider(template) [0xfffff80118919000,0xfffff80118919064): ESCAPE 1948 bytes
NEG:   frag2 window [0xfffff80118919800,0xfffff80118919c00) vs provider(template) [0xfffff80118919000,0xfffff80118919064): ESCAPE 2972 bytes
NEG:   frag3 window [0xfffff80118919c00,0xfffff8011891a000) vs provider(template) [0xfffff80118919000,0xfffff80118919064): ESCAPE 3996 bytes
NEG:   P1a frags=5 sent=4096 escaped=1 esc_bytes=8916
NEG: [P1a SHRINK 4096->100 (latent wrap at :746)] LATENT-PRIMITIVE observed: max_len wrapped past provider window (OOB DMA read, IN)
NEG:   frag1 window [0xfffff80118919400,0xfffff80118919800) vs provider(template) [0xfffff80118919000,0xfffff80118919004): ESCAPE 2044 bytes
NEG:   frag2 window [0xfffff80118919800,0xfffff80118919c00) vs provider(template) [0xfffff80118919000,0xfffff80118919004): ESCAPE 3068 bytes
NEG:   frag3 window [0xfffff80118919c00,0xfffff8011891a000) vs provider(template) [0xfffff80118919000,0xfffff80118919004): ESCAPE 4092 bytes
NEG:   P1b frags=5 sent=4096 escaped=1 esc_bytes=9204
NEG: [P1b SHRINK 1024->4 (latent wrap at :746)] LATENT-PRIMITIVE observed: max_len wrapped past provider window (OOB DMA read, IN)
NEG:   P1c frags=2 sent=200 escaped=0 esc_bytes=0
NEG: [P1c SHRINK 200->4 wL=0xFFFF (force_short guards)] contained
NEG: [F01 SET_INTERFACE alt=2 (valid, no_alts=3)] contained
NEG: [F02 SET_INTERFACE alt=3 (invalid)] contained
NEG: [F03 GET_INTERFACE (after alt=2, zero-copy 1B)] contained
NEG: [F04 GET_INTERFACE wIndex=3 (no idesc)] contained
NEG: [F05 GET_INTERFACE wIndex=255 (OOB index)] contained
NEG: [F06 broadcast req, all ifaces decline] contained
NEG: [D01 driver conformant read wL=8] contained
NEG: [D02 driver conformant read wL=0xFFFF (plen=0 at off>0)] contained
NEG: [D03 driver conformant WRITE wL=7] contained
NEG: [D04 driver conformant WRITE wL=0x100] contained
NEG:   frag1 window [0xfffff801168f8000,0xfffff801168f812c) vs provider(driver) [0xfffff801168f7c00,0xfffff801168f8000): ESCAPE 300 bytes
NEG:   frag2 window [0xfffff801168f812c,0xfffff801168f8258) vs provider(driver) [0xfffff801168f7c00,0xfffff801168f8000): ESCAPE 600 bytes
NEG:   frag3 window [0xfffff801168f8258,0xfffff801168f8384) vs provider(driver) [0xfffff801168f7c00,0xfffff801168f8000): ESCAPE 900 bytes
NEG:   frag4 window [0xfffff801168f8384,0xfffff801168f84b0) vs provider(driver) [0xfffff801168f7c00,0xfffff801168f8000): ESCAPE 1200 bytes
NEG:   frag5 window [0xfffff801168f84b0,0xfffff801168f85dc) vs provider(driver) [0xfffff801168f7c00,0xfffff801168f8000): ESCAPE 1500 bytes
NEG:   frag6 window [0xfffff801168f85dc,0xfffff801168f8708) vs provider(driver) [0xfffff801168f7c00,0xfffff801168f8000): ESCAPE 1800 bytes
NEG:   frag7 window [0xfffff801168f8708,0xfffff801168f8834) vs provider(driver) [0xfffff801168f7c00,0xfffff801168f8000): ESCAPE 2100 bytes
NEG:   P2 frags=8 sent=3124 escaped=1 esc_bytes=8400
NEG: [P2 LYING DRIVER plen 1024->300 (latent)] LATENT-PRIMITIVE observed: driver-trust: OOB window via plen>buffer
NEG:   P3 frags=2 sent=4 null_frame=1
NEG: [P3 DRIVER pptr-unset plen=4 (latent)] LATENT-PRIMITIVE observed: NULL frame pointer with len>0
NEG: [E01 error-state GET_STATUS -> STALLED] contained
NEG: [E02 completed-state GET_STATUS -> STALLED] contained
NEG: [E03 no-active-transfer SETUP -> STALLED] contained
NEG: battery done
NEG: SUMMARY: contained=41 failed=0 latent-primitives=4
NEG: RESULT: ALL CONTAINMENT EXPECTATIONS MET (g_fail=0, latent primitives observed as expected: 4)
NEG: rig unloaded
NEG: rig loaded (production usb_handle_request.c, driver-leg=1)
NEG: canary: guard checker detects 1-byte writes (n=1) OK
NEG: battery start
NEG: [I01 GET_CONFIG wL=1] contained
NEG: [I02 GET_CONFIG wL=64 (short-terminate)] contained
NEG: [I03 GET_CONFIG wL=0] contained
NEG: [I04 GET_STATUS(dev) wL=2] contained
NEG: [I05 GET_STATUS(dev) wL=8] contained
NEG: [I06 GET_STATUS(dev) wL=0xFFFF (wrap feeder)] contained
NEG: [I07 GET_STATUS(dev) wL=0] contained
NEG: [I08 GET_STATUS(ep 0x81) wL=2] contained
NEG: [I09 GET_STATUS(ep 0x7F nonexistent)] contained
NEG: [I10 SET_ADDRESS 0x7F (valid)] contained
NEG: [I11 SET_ADDRESS 0x80 (invalid)] contained
NEG: [I12 SET_ADDRESS 0xFFFF (invalid)] contained
NEG: [I13 CLEAR_FEATURE(halt ep 0x81)] contained
NEG: [I14 SET_FEATURE(halt ep 0x81)] contained
NEG: [I15 CLEAR_FEATURE(halt ep 0x33 nonexistent)] contained
NEG: [T01 GET_DESC(dev) len=18 wL=18 exact] contained
NEG: [T02 GET_DESC(dev) len=18 wL=64] contained
NEG: [T03 GET_DESC(dev) len=18 wL=0xFFFF] contained
NEG: [T04 GET_DESC(cfg) len=4096 wL=4096 multi-frag] contained
NEG: [T05 GET_DESC(cfg) len=2048 wL=4096 (short)] contained
NEG: [T06 GET_DESC(cfg) len=1024 wL=1024 exact] contained
NEG: [T07 GET_DESC(cfg) len=1025 wL=4096] contained
NEG: [T08 GET_DESC(str) len=255 wL=255 exact] contained
NEG: [T09 GET_DESC(str) len=2 wL=1] contained
NEG: [T10 GET_DESC len=1 wL=0xFFFF] contained
NEG: [T11 vendor req, provider stalls] contained
NEG: [T12 vendor-class desc len=52 wL=255 (iface decline first)] contained
NEG:   frag1 window [0xfffff80118919400,0xfffff80118919800) vs provider(template) [0xfffff80118919000,0xfffff80118919064): ESCAPE 1948 bytes
NEG:   frag2 window [0xfffff80118919800,0xfffff80118919c00) vs provider(template) [0xfffff80118919000,0xfffff80118919064): ESCAPE 2972 bytes
NEG:   frag3 window [0xfffff80118919c00,0xfffff8011891a000) vs provider(template) [0xfffff80118919000,0xfffff80118919064): ESCAPE 3996 bytes
NEG:   P1a frags=5 sent=4096 escaped=1 esc_bytes=8916
NEG: [P1a SHRINK 4096->100 (latent wrap at :746)] LATENT-PRIMITIVE observed: max_len wrapped past provider window (OOB DMA read, IN)
NEG:   frag1 window [0xfffff80118919400,0xfffff80118919800) vs provider(template) [0xfffff80118919000,0xfffff80118919004): ESCAPE 2044 bytes
NEG:   frag2 window [0xfffff80118919800,0xfffff80118919c00) vs provider(template) [0xfffff80118919000,0xfffff80118919004): ESCAPE 3068 bytes
NEG:   frag3 window [0xfffff80118919c00,0xfffff8011891a000) vs provider(template) [0xfffff80118919000,0xfffff80118919004): ESCAPE 4092 bytes
NEG:   P1b frags=5 sent=4096 escaped=1 esc_bytes=9204
NEG: [P1b SHRINK 1024->4 (latent wrap at :746)] LATENT-PRIMITIVE observed: max_len wrapped past provider window (OOB DMA read, IN)
NEG:   P1c frags=2 sent=200 escaped=0 esc_bytes=0
NEG: [P1c SHRINK 200->4 wL=0xFFFF (force_short guards)] contained
NEG: [F01 SET_INTERFACE alt=2 (valid, no_alts=3)] contained
NEG: [F02 SET_INTERFACE alt=3 (invalid)] contained
NEG: [F03 GET_INTERFACE (after alt=2, zero-copy 1B)] contained
NEG: [F04 GET_INTERFACE wIndex=3 (no idesc)] contained
NEG: [F05 GET_INTERFACE wIndex=255 (OOB index)] contained
NEG: [F06 broadcast req, all ifaces decline] contained
NEG: [D01 driver conformant read wL=8] contained
NEG: [D02 driver conformant read wL=0xFFFF (plen=0 at off>0)] contained
NEG: [D03 driver conformant WRITE wL=7] contained
NEG: [D04 driver conformant WRITE wL=0x100] contained
NEG:   frag1 window [0xfffff801168f8000,0xfffff801168f812c) vs provider(driver) [0xfffff801168f7c00,0xfffff801168f8000): ESCAPE 300 bytes
NEG:   frag2 window [0xfffff801168f812c,0xfffff801168f8258) vs provider(driver) [0xfffff801168f7c00,0xfffff801168f8000): ESCAPE 600 bytes
NEG:   frag3 window [0xfffff801168f8258,0xfffff801168f8384) vs provider(driver) [0xfffff801168f7c00,0xfffff801168f8000): ESCAPE 900 bytes
NEG:   frag4 window [0xfffff801168f8384,0xfffff801168f84b0) vs provider(driver) [0xfffff801168f7c00,0xfffff801168f8000): ESCAPE 1200 bytes
NEG:   frag5 window [0xfffff801168f84b0,0xfffff801168f85dc) vs provider(driver) [0xfffff801168f7c00,0xfffff801168f8000): ESCAPE 1500 bytes
NEG:   frag6 window [0xfffff801168f85dc,0xfffff801168f8708) vs provider(driver) [0xfffff801168f7c00,0xfffff801168f8000): ESCAPE 1800 bytes
NEG:   frag7 window [0xfffff801168f8708,0xfffff801168f8834) vs provider(driver) [0xfffff801168f7c00,0xfffff801168f8000): ESCAPE 2100 bytes
NEG:   P2 frags=8 sent=3124 escaped=1 esc_bytes=8400
NEG: [P2 LYING DRIVER plen 1024->300 (latent)] LATENT-PRIMITIVE observed: driver-trust: OOB window via plen>buffer
NEG:   P3 frags=2 sent=4 null_frame=1
NEG: [P3 DRIVER pptr-unset plen=4 (latent)] LATENT-PRIMITIVE observed: NULL frame pointer with len>0
NEG: [E01 error-state GET_STATUS -> STALLED] contained
NEG: [E02 completed-state GET_STATUS -> STALLED] contained
NEG: [E03 no-active-transfer SETUP -> STALLED] contained
NEG: battery done
NEG: SUMMARY: contained=41 failed=0 latent-primitives=4
NEG: RESULT: ALL CONTAINMENT EXPECTATIONS MET (g_fail=0, latent primitives observed as expected: 4)
NEG: rig unloaded
=== rc check ===
RUN_RC=0
 6:57PM  up 2 mins, 0 users, load averages: 0.06, 0.05, 0.02